BigBrassBand Privacy Policy

Last updated: September 2017

This Privacy Policy was developed by BigBrassBand LLC and its related entities ("BigBrassBand", "we", "us" or "our") and applies to visitors and registered or licensed users of our Websites, our Cloud and Downloadable Products, and our services (collectively "BigBrassBand Services").

This Policy describes the information we collect, how it is collected, for what purposes it is collected, how we share it, how we handle the content you place in our products and services, and the steps we take to secure this information.

By using or registering for any of the BigBrassBand Services you consent to the collection, transfer, processing, storage, disclosure and other uses described in this privacy policy.

Changes to our Privacy Policy


We may change this Privacy Policy from time to time. If we make any changes, we will notify you by revising the "Effective Starting" date at the top of this Privacy Policy and, in some cases, where appropriate we may provide you with additional notice (such as adding a statement to the login screen or sending you an email notification).  We encourage you to review our Privacy Policy whenever you use BigBrassBand Services to stay informed about our information practices and the ways you can help protect your privacy.

Your continued use of the BigBrassBand Service after any changes to this Privacy Policy will constitute your acceptance of such modification.

If you disagree with any changes to this privacy policy, you will need to stop using BigBrassBand Services and deactivate your account(s).

Scope of Privacy Policy


This Privacy Policy applies to the information that we obtain through your use of or interaction with BigBrassBand Services, but does not apply to:

  • BigBrassBand Services for which a separate privacy policy is provided.
  • Third-party products.  These are third-party products or services that you may choose to integrate with BigBrassBand Services, such as third-party Add-Ons available in the Atlassian Marketplace.  You should always review the policies of third-party products and services to make sure you are comfortable with the ways in which they collect and use your information.

Unless otherwise stated, our Cloud Services and our Downloadable Products are treated the same for the purposes of this document.

Definitions


Add-on

A bundle of code, resources and configuration files that can be used with a BigBrassBand Service to add new functionality or to change the behavior of that product's existing features.

Cloud Services

BigBrassBand's software as a service ("SaaS") solutions.

Content

Any information or data that you upload, submit, post, create, transmit, store or display in a BigBrassBand Service.

Downloadable Products

BigBrassBand's downloadable software products and mobile applications that are installed by customers on an infrastructure of their choice.

Information

All of the different forms of data, content, and information collected by us as described in this Privacy Policy.

Personal Data

Information relating to an identified or a directly or indirectly identifiable natural person, such as: name, address, email address, phone number, IP address or location data.  Personal Data that has been anonymized such that it does not allow for the ready identification of specific individuals is no longer considered Personal Data.

Websites

BigBrassBand websites, including but not limited to bigbrassband.com, BigBrassBand's product listings on the Atlassian Marketplace, support site, and any related websites, sub-domains and webpages.

How Do We Collect Information


Information you provide to us
Account and Profile Information

We collect information about you when you register for an account, create or modify your profile, make purchases through, use, access, or interact with BigBrassBand Services. Information we collect includes but is not limited to your name, company name, company address, email address, phone number, job title.  You may provide this information directly when you enter it in BigBrassBand Services, or in some cases another user (such as a system administrator) creating an account on your behalf may provide it (most commonly when your company requests that you use our products).  If you are providing information (including Personal Data) about someone else, you confirm that you have the authority to act for that person, and to agree to this Privacy Policy.

Content

We collect and store Content that you create, input, submit, post, upload, transmit, store or display in the process of using our Cloud Services or Websites.  Such Content includes any Personal Data or other sensitive information that you choose to include ("passively-collected Personal Data").

Other submissions

We collect other data that you submit to our Websites or as you participate in any interactive features of the BigBrassBand Services, participate in a survey, contest, promotion, activity or event, apply for a job, request customer support, communicate with us via third-party social media services or otherwise communicate with us.  For example, information regarding a problem you are experiencing with a BigBrassBand Service could be submitted to our Support Services or posted in our public forums.  Any information, including Personal Data, that you submit to our Websites could be visible to the public unless submitted to a secure area in the Website.

Information we collect from your use of BigBrassBand Services
Web Logs

As is true with most websites and services delivered over the Internet, we gather certain information and store it in log files when you interact with our Websites and Cloud Services.  This information includes internet protocol (IP) addresses as well as browser type, internet service provider, URLs of referring/exit pages, operating system, date/time stamp, information you search for, locale and language preferences, identification numbers associated with your Devices, your mobile carrier, and system configuration information.  For our Cloud Services, the information we collect includes the URLs you accessed (in our log files), usernames as well as elements of Content (such as Jira project names, project keys, status names, and JQL filters, and Confluence page titles and space names) as necessary for the Cloud Services to perform the requested operations.  Occasionally, we connect Personal Data to information gathered in our log files as necessary to improve BigBrassBand Services for individual customers.

Analytics Information from our Website

We collect analytics information when you use our Websites to help us improve our BigBrassBand Services.  The analytics information we collect includes elements of Content related to the function the user is performing.  As such, the analytics information we collect may include Personal Data or sensitive business information.

Analytics Information Derived from Content

Analytics information also consists of data we collect as a result of running queries against Content across our user base for the purposes of generating Usage Data.  "Usage Data" is aggregated data about a group or category of services, features or users that does not contain Personal Data.

Though we may encounter sensitive or Personal Data as we compile Usage Data from Content across user instances, this is a byproduct of our efforts to understand broader patterns and trends.  It is not a concerted effort by us to examine the Content of any particular customer.

Analytics Information from Cloud Services

We collect analytics information when you use our Cloud Services to help us improve our BigBrassBand Services.  The analytics information we collect includes elements of Content related to the function or feature the user is using.  The analytics information consists of the feature and function of the BigBrassBand Service being used, the associated license identifier (SEN) and domain name, the IP address and username of the individual who is using the feature or function, the sizes and original filenames of attachments, and additional information required to detail the operation of the function and which parts of the BigBrassBand Services are being affected.

You cannot opt-out of our collection of analytics information from our Cloud Services.  Thus, if you use our services, you consent the collection of such information.

Cookies and Other Tracking Technologies

We use various technologies to collect information, including cookies that we save to your computer or mobile device.  Cookies are small data files stored on your hard drive or in device memory.  We use cookies to improve and customize BigBrassBand Services and your experience; to allow you to access and use the Websites or Cloud Services without reentering your username or password; and to count visits and understand which areas and features of the Websites and Cloud Products are most popular.  We also collect information using web beacons (also known as "tracking pixels").  Web beacons are electronic images that may be used in our Websites, Cloud Services or emails that help us to deliver cookies, count visits, understand usage and campaign effectiveness and determine whether an email has been opened and acted upon.

For information on how to block cookies, see the opt-out section below.  If you do not accept cookies, however, you may not be able to use all aspects of our Websites or Cloud Services.

Information we collect from other sources
Information from third-party services

We also obtain information from third-parties and combine that with information we collect through BigBrassBand Services.  For example, we may have access to certain information from a third-party social media service or authentication service if you log into our BigBrassBand Services through such a service or otherwise provide us with access to information from the service.  Any access that we may have to such information from a third-party social media service or authentication service is in accordance with the authorization procedures determined by that service.  By authorizing us to connect with a third-party service, you authorize us to access and store your name, email address(es), current city, profile picture URL, and other information that the third-party service makes available to us, and to use and disclose it in accordance with this Privacy Policy. You should check your privacy settings on these third-party services to understand and change the information sent to us through these services.

How We Use Information We Collect


General Uses

We use the information we collect about you (including Personal Data to the extent applicable) for a variety of purposes, including to:

  • Provide, operate, maintain, improve, and promote BigBrassBand Services;
  • Enable you to access and use BigBrassBand Services;
  • Process and complete transactions, and send you related information, including purchase confirmations and invoices;
  • Communicate with you, including responding to your comments, questions, and requests; providing customer service and support; providing you with information about services, features, surveys, newsletters, offers, promotions, contests and events; providing other news or information about us and our select partners; and sending you technical notices, updates, security alerts, and support and administrative messages.  Generally, you have the ability to opt out of receiving any promotional communications as described below under "Your Choices";
  • Process and deliver promotions and rewards;
  • Monitor and analyze trends, usage, and activities in connection with BigBrassBand Services and for marketing or advertising purposes;
  • Investigate and prevent fraudulent transactions, unauthorized access to BigBrassBand Services, and other illegal activities;
  • Personalize BigBrassBand Services, including by providing content, features, or advertisements that match your interests and preferences;
  • Enable you to communicate, collaborate, and share Content with users you designate; and
  • For other purposes about which we notify you.

Notwithstanding the foregoing, we will not use Personal Data appearing in our Analytics Logs or Web Logs for any purpose.

Compiling aggregate analytics information

We make extensive use of analytics information (including log and configuration data) to understand how our BigBrassBand Services are being configured and used, how they can be improved for the benefit of all of our users, and to develop new products and services. As such we generate Usage Data (as defined above) from the web logs and analytics logs described above, including the Content elements captured in such logs, as well as from the Content stored in the Websites and Cloud Services.

Information Sharing and Disclosure


We will not share or disclose your Personal Data or Content with third-parties, except as described in this policy.  We do not sell your Personal Data or Content, nor do we share your Personal Data with third-parties for their marketing purposes (including direct marketing purposes) without your permission.

Service Providers, Business Partners and Others

We work with third-party service providers to provide website, application development, hosting, maintenance, back-up, storage, virtual infrastructure, analysis and other services for us.  These third-parties may have access to or process your Information as part of providing those services for us.

Third-party applications

You may choose to make use of third-party Add-Ons in conjunction with BigBrassBand Services.  Third-party Add-Ons are software written by third-parties to which you grant access privileges to your Content (which may include your Personal Data).  When access is granted, your Content is shared with the third-party.  Third-party Add-On policies and procedures are not controlled by BigBrassBand even though the third-party Add-On may be available through BigBrassBand Services.  Third-parties who have been granted access to your Content through Add-Ons could use this data to contact you and market services to you, and could share your data with other third-parties.

This Privacy Policy does not cover the collection or use of your data by third-party Add-Ons, and we urge you to examine the privacy policies governing third-party Add-Ons.

Compliance with Laws and Law Enforcement Requests; Protection of Our Rights

We may disclose your Information (including your Personal Data) to a third-party if (a) we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or governmental request; (b) to enforce our agreements, policies and terms of service; (c) to protect the security or integrity of BigBrassBand's products and services; (d) to protect BigBrassBand, our customers or the public from harm or illegal activities; or (e) to respond to an emergency which we believe in the good faith requires us to disclose information to assist in preventing the death or serious bodily injury of any person.

Business Transfers

We may share or transfer your information (including your Personal Data) in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Aggregated or Anonymized Data

We may also share aggregated or anonymized information that does not directly identify you with the third-parties described above.

With Your Consent

We will share your Personal Data with third-parties when we have your consent to do so.

Security; Data at Rest and in Transit


BigBrassBand hosts data with service providers the United States.  The servers on which Personal Data is stored are kept in a controlled environment.

Where data is transferred over the Internet as part of a Website or Cloud Services, the data transmitted using industry standard HTTPS.

While we take reasonable efforts to guard your Personal Data, no security system is impenetrable and due to the inherent nature of the Internet as an open global communications vehicle, we cannot guarantee that information, during transmission through the Internet or while stored on our systems or otherwise in our care, will be absolutely safe from intrusion by others, such as hackers.  In addition, we cannot guarantee that any passively-collected Personal Data you choose to store in Websites or Cloud Services are maintained at levels of protection to meet specific needs or obligations you may have relating to that information.

Where Downloadable Products are used, responsibility for securing access to the data you store in the Downloadable Products rests with you and not BigBrassBand.  We strongly recommend that administrators of Downloadable Products enable encryption in transit (e.g., HTTPS) to prevent interception of data transmitted over networks and to restrict access to the databases and other storage used to hold data.