Privacy at BugFlows

A shield icon representing data privacy and security at BugFlows

Last Updated: January 15, 2025

Welcome to BugFlows ("BugFlows," "we," "us," or "our"). In accordance with the principles of legality, fairness, and transparency, we provide you with this Privacy Policy. We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our website (bugflows.com) and use our services (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

1. Who is the Data Controller?

Data Controller: BugFlows

Contact Email: [email protected]

Data Protection Officer (DPO): [email protected]

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

2. For What Purposes Do We Process Your Personal Data?

At BugFlows, we process the information you provide us for the following purposes:

Service Provision: To provide, operate, and maintain our bug tracking and management services
Account Management: To create and manage your user account
Communication: To send you service-related communications, updates, and support
Security: To protect against fraud, abuse, and security incidents
Analytics: To analyze usage patterns and improve our services
Marketing: To send marketing communications (with your consent)
Legal Compliance: To comply with legal obligations and regulatory requirements

3. What Is the Legitimacy for the Processing of Your Data?

The legal basis for processing your personal data depends on the type of data and the purpose of processing:

Contractual Necessity: Processing necessary for the performance of our service contract with you
Legitimate Interest: Processing for our legitimate business interests, such as security, fraud prevention, and service improvement
Consent: Processing based on your explicit consent for marketing and other optional purposes
Legal Obligation: Processing necessary to comply with applicable laws and regulations

The data we request from you are adequate, relevant, and strictly necessary. You are not obliged to provide them, but failure to provide certain data may affect the provision of the service or make it impossible to provide.

4. Information We Collect

We collect personal information to provide and improve our Services. The types of personal information we may collect include:

4.1. Information You Provide Directly:

Account Information: When you create an account or use our Services, we may collect your name, email address, company name, and password.
Payment Information: If you subscribe to paid services, we (or our third-party payment processors) will collect payment information, such as credit card details or other financial account information. BugFlows does not store your full credit card information.
Communications: If you contact us directly (e.g., via email, support requests), we may receive additional information about you, such as the contents of your message and any attachments you may send us.
Content You Submit: Information you provide when using our services, such as bug reports, project details, comments, and other content.

4.2. Information We Collect Automatically (Usage Data):

Log Data: When you use our Services, our servers automatically record information ("Log Data"), including your Internet Protocol (IP) address, browser type and settings, the date and time of your request, how you interacted with our Services, and cookie data.
Device Information: We may collect information about the device you are using to access our Services, including what type of device it is, its operating system, device settings, application IDs, unique device identifiers, and crash data.
Usage Information: We collect information about how you use our Services, such as the features you use, the pages you visit, the links you click, and the duration of your activities.
Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Services and hold certain information. Please see Section 8 ("Cookies and Tracking Technologies") for more details.

4.3. Information from Third Parties:

Analytics Providers: We use third-party analytics services, like Google Analytics, to help us understand how users engage with our Services. These services may use cookies and similar technologies to collect information about your use of our Services and report website trends. (See Section 8).
Authentication Services: If you log in to our Services using a third-party authentication service (e.g., Google, GitHub), we may receive information from that service, such as your name and email address, as permitted by your privacy settings on that service.

5. How Long Will We Keep Your Personal Data?

Your data will be kept for the minimum time necessary for the correct provision of the service offered as well as to meet the responsibilities that may arise from the same and any other legal requirement. Specific retention periods are as follows:

Account Information: Retained for the duration of your account and for a reasonable period after account closure to comply with legal obligations
Usage Data: Generally retained for 12-24 months for analytics purposes, unless required for security or legal reasons
Payment Information: Payment transaction records retained for 7 years to comply with tax and accounting requirements
Communications: Retained for 2-3 years for support and service improvement purposes
Content You Submit: Retained for the duration of your account unless you request deletion

When data is no longer necessary for the purposes for which it was collected, it will be securely deleted or anonymized.

6. To Which Recipients Will Your Data Be Disclosed?

BugFlows may communicate your data to the following categories of recipients for the correct provision of services:

Service Providers: Third-party vendors, consultants, and other service providers who perform services on our behalf, such as hosting, data analytics (e.g., Google Analytics), payment processing, email delivery, and customer service. These service providers are authorized to use your personal information only as necessary to provide these services to us.
Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction as permitted by law and/or contract.
Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability.
With Your Consent: We may share your information with third parties when we have your explicit consent to do so.
Aggregated or De-identified Data: We may share aggregated or de-identified information, which cannot reasonably be used to identify you, for various purposes, including research and analysis, and to help our partners understand how users engage with their services.

Additionally, we inform you that certain data, by virtue of the regulations in force or the contractual relationship that BugFlows maintains, may be communicated to:

Banks and financial institutions for the collection of contracted services and/or purchased products
Public administrations with competence in the sectors in which BugFlows operates, when so established by the regulations in force

7. Are Data Transferred Internationally?

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there. Our service providers may also be located in the United States or other jurisdictions.

BugFlows may carry out international data transfers from this website derived from the acceptance of cookies and use of third-party services:

Google LLC and Google Ireland Limited transfer data to the United States based on the user's consent when accepting cookies
By accepting cookies from these entities, you consent to the transfer of your personal data that may be collected through the loading and reading of cookies to the United States

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information. For transfers of personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or other legally provided mechanisms.

8. Data Security

In order to safeguard the security of your personal data, we inform you that we have adopted all the technical and organizational measures necessary to guarantee the security of the personal data supplied. All of this to avoid their alteration, loss, and/or unauthorized processing or access, as required by law, although absolute security does not exist.

We implement strong security measures designed to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include encryption, secure cloud storage (e.g., AWS, Google Cloud), multi-factor authentication, and regular security assessments. However, no internet or email transmission is ever fully secure or error-free, so you should take special care in deciding what information you send to us.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like web beacons and pixels) to collect and use personal information about you. For further information about the types of cookies and tracking technologies we use, why, and how you can control them, please see our Cookie Policy.

Currently, we use Google Analytics to monitor and analyze the use of our Service. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

Our website displays a cookie banner that allows you to accept or reject certain types of cookies. You can typically manage your cookie preferences through your browser settings.

Do Not Track: Some web browsers may transmit "Do Not Track" signals to websites with which the browser communicates. Our Services do not currently respond to "Do Not Track" signals.

10. What Are Your Rights When You Provide Us With Your Data?

Depending on your location and applicable law, you may have certain rights regarding your personal information. These rights may include:

The right to access: You have the right to request copies of your personal information.
The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure (Right to be Forgotten): You have the right to request that we erase your personal information, under certain conditions.
The right to restrict processing: You have the right to request that we restrict the processing of your personal information, under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal information, under certain conditions (e.g., for direct marketing purposes).
The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The right to withdraw consent: If we are processing your personal information based on your consent, you have the right to withdraw your consent at any time.
The right to opt-out of sale or sharing (California Residents): If you are a California resident, you have the right to opt-out of the "sale" or "sharing" of your personal information. BugFlows does not currently "sell" personal information as traditionally defined. However, "sharing" under the CCPA/CPRA can include sharing for cross-context behavioral advertising. We will provide mechanisms to opt-out if our practices change to include such sharing.
The right to non-discrimination: We will not discriminate against you for exercising any of your data protection rights.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable law. We may need to verify your identity before processing your request.

11. Can I Withdraw My Consent?

You have the possibility and the right to withdraw consent for any specific purpose given at the time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. To withdraw your consent, please contact us at [email protected].

12. Where Can I Complain If I Feel That My Data Is Not Being Handled Correctly?

If any data subject considers that their data are not being processed correctly by BugFlows or that requests to exercise their rights have not been dealt with satisfactorily, they may lodge a complaint with the corresponding data protection authority:

EEA Residents: You have the right to lodge a complaint with a supervisory authority in the Member State where you reside, where you work, or where an alleged infringement of data protection law has occurred
UK Residents: You may lodge a complaint with the Information Commissioner's Office (ICO)
California Residents: You may lodge a complaint with the California Attorney General
Other Jurisdictions: You may contact your local data protection authority

13. Confidentiality

BugFlows informs you that your data will be treated with the utmost care and confidentiality by all personnel involved in any of the processing phases. We will not transfer or communicate your data to any third party, except in the cases provided for by law, or unless you have expressly authorized us to do so.

14. Children's Privacy

Our Services are not directed to individuals under the age of 16 (or a higher age threshold where applicable under local law). We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe that a child has provided us with personal information in violation of this Privacy Policy, please contact us at [email protected].

15. Links to Other Websites

Our Services may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

16. Modifications to the Privacy Policy

BugFlows reserves the right to modify this policy to adapt it to new legislation or changes in services. In case of relevant modifications, we will notify you through our website or by email. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

17. Specific Information for California Residents (CCPA/CPRA)

This section supplements the information contained in our Privacy Policy and applies solely to visitors, users, and others who reside in the State of California.

Categories of Personal Information Collected: In the preceding 12 months, we have collected the categories of personal information listed in Section 4.
Business or Commercial Purpose for Collection: We collect personal information for the business and commercial purposes described in Section 2.
Categories of Sources: We collect personal information from the categories of sources described in Section 4.
Categories of Third Parties with Whom We Share Information: We may share your personal information with the categories of third parties described in Section 6.
Your Rights: As a California resident, you have the rights listed in Section 10, including the right to know, delete, correct, and opt-out of sale/sharing. To exercise these rights, please contact us at [email protected] or through any other method we may provide on our website. We may require you to provide additional information to verify your identity. You may also designate an authorized agent to make a request on your behalf.

18. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

Data Protection Officer: [email protected]