--- title: "BluBees Privacy Policy (BB-PRI-007)" canonical: "https://doc.blubees.ai/space/blubeesdoc/191692823/BluBees%20Privacy%20Policy%20(BB-PRI-007)" format: markdown --- > Macro (toc) | Field | Detail | | --- | --- | | Document ID | BB-PRI-007 | | Version | 1.3.1 | | Status | [Published] | | Effective Date | 27 Aug 2026 | | Owner | BluBees LLC — Legal / Compliance | | Classification | Public | | Applies To | BluBees Cloud and BluBees AGC | | Trust Center | [https://blubees.ai/trustcenter/](https://blubees.ai/trustcenter/) | > ℹ️ This Privacy Policy is the umbrella privacy notice for BluBees LLC. It is incorporated by reference into the BluBees Terms of Service (Section 6.1) and works together with the detailed statutory notices published at the BluBees Trust Center: the GDPR Compliance and Privacy Policy, the U.S. Privacy Notice, the CCPA Compliance Statement, and the CCPA Non-Applicability Notice. ## 1. Introduction BluBees LLC ("BluBees") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information across BluBees's products and services — BluBees Cloud (standard commercial) and BluBees AGC (Atlassian Government Cloud). ## 2. Scope This Privacy Policy governs personal information collected through our products and services. Where BluBees processes personal data on a customer's behalf as a Data Processor, that processing is governed by the BluBees Data Processing Addendum, published at the Trust Center. ## 3. Information We Collect ### 3.1 Account and Contact Information Name, business email address, business telephone number, job title, organization name, company address, and Jira user identifier. Billing is processed by Atlassian — we do not store payment card data. ### 3.2 Information Processed Through Our Products | Category | Details | | --- | --- | | Business contact information | Name, company, business email, business phone, company address, Jira user identifier | | Integration Credentials (encrypted) | API tokens, OAuth tokens/secrets, account identifiers, domain names — including customer AI provider credentials — stored in encrypted form solely to maintain your configured integrations | | Configuration Data | Workflow definitions, automation rules, field mappings, integration settings, preferences | | Jira platform metadata | Limited — licensing, tenant identification, and integration | > 📝 **Pass-Through Data is never stored.** Data flowing between your configured third-party services and AI providers during workflow execution is transmitted transiently and is never stored or persisted by BluBees. ### 3.3 No Website Tracking; No Automatic Collection BluBees does not operate a public-facing web server. The Service is delivered entirely within your organization's Jira Cloud instance. **BluBees does not collect IP addresses, geolocation data, browser or device fingerprinting, cookies, web beacons, behavioral analytics, or advertising tracking — anywhere.** ### 3.4 Information We Do Not Collect We do not collect: government-issued ID numbers, payment card data, biometric data, passwords or login credentials (authentication is managed by Atlassian), or special categories of personal data under GDPR Article 9. ## 4. Legal Bases for Processing | Legal Basis | When We Rely On It | | --- | --- | | Contract performance | Providing the Service; maintaining your configured integrations; processing transactions | | Legitimate interest | Improving our products; security monitoring; fraud prevention; communicating relevant product updates to existing customers | | Consent | Sending marketing communications where consent is obtained. You may opt out at any time by contacting privacy@blubees.ai | | Legal obligation | Compliance with applicable laws, court orders, or regulatory requirements | ## 5. How We Use Your Information - Providing, maintaining, and improving the Service and maintaining your configured integrations - Authenticating and connecting with your third-party services and customer-provided AI accounts using your Integration Credentials - Managing your account and processing transactions (via Atlassian) - Sending service-related communications (security alerts, update notices, renewal notifications, support responses) - Complying with legal obligations and enforcing our terms BluBees does **not** use personal information for advertising, targeted marketing, user profiling, behavioral analytics, or cross-service monitoring, and does not sell or monetize personal information in any form. **BluBees does not use Customer Data or Pass-Through Data to train AI models.** ## 6. Information Sharing We do not sell your personal information. We share information only with: subprocessors identified in the Data Processing Addendum; Atlassian as the platform provider and billing agent; your configured Third-Party Services per your workflow configuration; and when required by applicable law or in connection with a business transfer. ## 7. Data Retention Upon termination or uninstall, Customer Data is deleted from live systems within 30 days and encrypted backups are destroyed within 60 days. Support ticket records: 3 years. Security logs: minimum 3 years. Direct-invoice financial records: 7 years. ## 8. Security TLS 1.2+ in transit, AES-256 at rest, MFA for privileged access, least-privilege access controls. Full security architecture is described in the Security Overview. ## 9. Your Privacy Rights Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information. Submit requests to privacy@blubees.ai. ## 10. No Tracking Technologies BluBees does not use cookies, web beacons, pixel tags, or similar tracking technologies. No analytics platforms or advertising networks are used in connection with the Service. ## 11. Children's Privacy BluBees services are not directed at or intended for use by children under the age of 16. ## 12. Changes to This Policy Material changes will be announced via the BluBees Trust Center. Continued use of the Service after the effective date constitutes acceptance. ## 13. AGC Deployments For BluBees AGC, all data BluBees stores is served from AWS GovCloud (US) and remains within the United States at all times. Federal notification obligations apply in addition to the standard 72-hour commitment. ## 14. Contact Privacy inquiries: privacy@blubees.ai · Security reports: security@blubees.ai ## Document History | Version | Date | Changes | | --- | --- | --- | | 1.0–1.2 DRAFT | 20 Aug 2026 | Initial Privacy Policy umbrella notice; BB-PRI-007 ID confirmed. | | 1.3 | 27 Aug 2026 | PUBLISHED per owner approval. No content changes. | | 1.3.1 | 27 Aug 2026 | Trust Center URL updated to https://blubees.ai/trustcenter/ per owner direction. No other changes. | > 📝 © BluBees LLC | BB-PRI-007 v1.3.1 | Effective 27 Aug 2026 | Trust Center: [https://blubees.ai/trustcenter/](https://blubees.ai/trustcenter/)