Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
Atlassian collects information you provide, such as account and profile details (data_use-1) and data from linked third-party services (data_use-2). They also automatically collect usage data (data_use-3) and device/connection information (data_use-4). There are some less obvious details, including that the privacy policy applies when Atlassian is the data controller, not when acting as a processor for customers (gotchas-1). When you connect third-party services, these services may access your information, and Atlassian is not responsible for their privacy practices (gotchas-2). Additionally, text messaging opt-in data is excluded from general third-party sharing (gotchas-3), and your email domain may be used to infer your organizational affiliation for personalization (gotchas-4). Data posted on public forums may be read and used by anyone, even after account termination (risk_flags-1), and the company cannot guarantee absolute security against intrusion (risk_flags-2). De-identified and aggregated content (gotchas-5), as well as shared information (gotchas-6), may be retained even after account deactivation.
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risks with how your data is handled
2 findings
This section flags potential risks in the policy related to data handling practices, such as lack of strong security assurances, data retention beyond necessity, or broad data sharing, which could impact user privacy and security.
high95% confidence
Public disclosure of information in Community Forums
Information provided on Atlassian's publicly accessible blogs, forums, issue trackers, and wikis, including profile information, may be read, collected, and used by any public member.
Why it matters: Any information you post on public forums, including your profile details, can be accessed, collected, and used by anyone, even after your account is closed. This could lead to unwanted exposure of your personal details.
_**Community Forums:**_ Our websites offer publicly accessible blogs, forums, issue trackers, and wikis (e.g.,[Atlassian Community](https://community.atlassian.com/),[Atlassian Developer Community](http://community.developer.atlassian.com/),[Trello Community](https://community.atlassian.com/t5/Trello/ct-p/trello), and[Trello Inspiration](https://trello.com/inspiration)).You should be aware that any information you provide on these websites - including profile information associated with the account you use to post the information - may be read, collected, and used by any member of the public who accesses these websites.
How we disclose information, paragraph 18 · Citation strength: strong
medium90% confidence
No guarantee of absolute security
Although safeguards are implemented, the company cannot guarantee that information will be absolutely safe from intrusion by others, due to the inherent nature of the Internet.
Why it matters: Your information might not be completely safe from unauthorized access, as the company states that no security system is impenetrable and they cannot guarantee absolute safety during transmission or storage.
While we implement safeguards designed to protect your information, no security system is impenetrable and due to the inherent nature of the Internet,we cannot guarantee that information, during transmission through the Internet or while stored on our systems or otherwise in our care,is absolutely safe from intrusion by others.
How we store and secure information, paragraph 2 · Citation strength: strong
How your data is used
4 findings
This section details how your data is collected, processed, and utilized by the service, outlining the purposes, methods, and types of data involved.
low95% confidence
Data collected directly from you
Atlassian collects information when you provide it directly, such as when you register for an account, create or modify your profile, set preferences, make purchases, or inquire about pricing, billing, and licensing.
Why it matters: The company collects information directly you, like your name, email, billing address, profile photo, and job title when you register, make purchases, or update your profile. This information is used to set up and manage your account.
_**Account Information and Profile Information:**_ We collect information when you register for an account, create or modify your profile, set preferences, sign up for or make purchases through the Services, and inquire about pricing, billing, and licensing. For example, you provide contact information (e.g., name or email address) and, in some cases, billing information (e.g., billing address, email address or name), when you register for the Services. You also have options to add a display name, profile photo, job title, and other details to your profile.We also keep track of your preferences when you select settings within the Services.
**Information you provide**, paragraph 2 · Citation strength: strong
low90% confidence
Information collected from linked third-party services
When you link a third-party service with Atlassian's Services, such as using Google credentials to log in, Atlassian receives information like your name and email address, as permitted by the third-party service's settings.
Why it matters: If you link third-party services to your Atlassian account, like logging in with Google, Atlassian will receive information like your name and email from that service, based on your privacy settings there.
You may also provide information to us when you integrate or link a third-party service with our Services. For example, if you create an account or log into the Services using your Google credentials, we receive your name and email address as permitted by your Google profile settings in order to authenticate you. The information we receive when you link or integrate our Services with a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in these third-party services to understand what information may be disclosed to us or shared with our Services.
**Information you provide**, paragraph 3 · Citation strength: strong
low90% confidence
Automatic collection of usage data
Atlassian automatically collects information about your use, operation, and interaction with their Services, including features used, actions performed, and types of content interacted with.
Why it matters: The company automatically collects data on how you use and interact with their services. This includes what features you use, what actions you take, and the kind of content you engage with.
_**Your use of the Services:**_ We collect information about your use, operation, and interaction with any of our Services, including when you connect third party services to or use those services with ours. This information includes, for example, the features you use, the actions you perform, and the type of content you interact with, such as the type, size and filenames of attachments uploaded to the Services; how search terms are structured and relevance scores of search results to search terms; the number of words in a Jira ticket or @ mentions in a comment; the type of Loom videos created and the number of views; languages you work in; and the links you interact with.
**Information we collect automatically**, paragraph 2 · Citation strength: strong
low90% confidence
Automatic collection of device and connection information
Atlassian collects information about the device you use to access their Services, including your connection type, operating system, browser type, IP address, referring/exit page URLs, device identifiers, and diagnostic and crash data.
Why it matters: The company automatically collects details about your device and internet connection, such as your IP address, operating system, and browser, when you access their services.
_**Device and Connection Information:**_ We collect information about your computer, phone, tablet, or other devices you use to access the Services. This device information includes your connection type and settings when you install, access, update, or use our Services. We also collect information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers, and diagnostic and crash data. We use your IP address and/or country preference to approximate your location to provide you with a better Service experience.How much of this information we collect depends on the type and settings of the device you use to access the Services.
**Information we collect automatically**, paragraph 3 · Citation strength: strong
Cancellation and renewal
All clear
This section explains the policies and procedures surrounding the cancellation of services or subscriptions, as well as the terms for automatic renewals or discontinuation.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Less obvious but important details
6 findings
This section highlights less obvious but important details in the policy that users might overlook, such as specific disclaimers, limitations of liability, or nuances in terms that could affect their rights or obligations.
low85% confidence
Privacy policy applies as a controller, not a processor
This privacy policy describes Atlassian's data practices when they act as a controller of personal information. It does not apply when they process personal information as a processor or service provider on behalf of their customers.
Why it matters: This privacy policy only applies when Atlassian is in control of your personal data. If they're processing your data on behalf of a customer (like your employer), that customer's policies will govern, not this one.
This privacy policy describes Atlassian’s data practices as a controller of personal information. Please note that this privacy policy does not apply to the extent that we process personal information in the role of a processor or service provider on behalf of our customers, as further specified in the [Data Processing Addendum](https://www.atlassian.com/legal/data-processing-addendum) entered into with those customers. When Atlassian processes personal information on behalf of our customers (such as your employer, if applicable), the customer is the controller of the personal information processed and manages those accounts and any Service sites.
If you or your administrator chooses to install or connect third-party services, these services may gain access to your account and information. The privacy policies of these third parties are not controlled by Atlassian.
Why it matters: Adding third-party services to your Atlassian account can give those services access to your information. Atlassian is not responsible for their privacy practices, so you should review their policies before connecting them.
Third-party service policies and procedures are not controlled by us, and this privacy policy does not cover how third-party services use your information. We encourage you to review the privacy policies of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to information about you being disclosed to these third parties, please do not install or connect the third-party service.
How we disclose information, paragraph 6 · Citation strength: strong
low85% confidence
Unsupported claims from text messaging originator opt-in data
All categories of information disclosed to third parties exclude text messaging originator opt-in data and consent. This specific information will not be shared with any third parties, except for aggregators and providers of text messaging services.
Why it matters: The policy states that your data from text messaging opt-ins will not be shared with third parties, except for those who aggregate or provide the text messaging services themselves.
All the above categories exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties, excluding aggregators and providers of the text messaging services.
How we disclose information, paragraph 3 · Citation strength: strong
low85% confidence
Email domain used to infer organizational affiliation
Atlassian may use your email domain to infer your affiliation with a particular organization or industry to personalize content and experiences on their websites.
Why it matters: Atlassian might use your email address's domain to figure out what organization or industry you belong to, in order to customize the content and experience you see on their websites.
We may use your email domain to infer your affiliation with a particular organization or industry to personalize the content and experience you receive on our websites.
How we use information, paragraph 2 · Citation strength: strong
low85% confidence
Retention of de-identified and aggregated content in products
Atlassian retains de-identified and aggregated content provided through their products in accordance with documentation for applicable data contribution product functionalities.
Why it matters: Even after your account is no longer active, the company may keep de-identified and aggregated content you provided through their products, so it cannot be traced back to you.
We retain de-identified and aggregated content in accordance with documentation for applicable data contribution Product functionalities.
How long we keep information, paragraph 3 · Citation strength: strong
low90% confidence
Retention of shared information after account deactivation
If your account is deactivated or disabled, some of your information and content will remain visible to allow team members or other users to fully use the Services, such as messages sent and content provided.
Why it matters: Even if your account is deactivated, some of your information and content, like messages you've sent, will still be accessible to other users in shared services.
_**Information you share on the Services:**_ If your account is deactivated or disabled, some of your information and the content you have provided will remain in order to allow your team members or other users to make full use of the Services.For example, we continue to display messages you sent to the users that received them and continue to display content you provided.
How long we keep information, paragraph 4 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.