Privacy Policy

Huling na-update: Setyembre 15, 2026

1. Introduction

East Agile ("Company", "we", "us", or "our"), a California corporation, operates East Agile Tracker at eastagiletracker.com ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are the data controller for the personal data we process through the Service. We are committed to protecting your privacy and handling your data in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Name and display name
  • Email address
  • Password (stored in hashed form)
  • Organization or company name (if provided)

Usage Data

We automatically collect information about how you interact with the Service:

  • Pages viewed and features used
  • Actions performed (e.g., creating stories, updating projects)
  • Date and time of access
  • Browser type and version
  • Device type and operating system
  • IP address

Analytics Data

We use PostHog for product analytics. If you consent to analytics cookies, PostHog collects anonymized usage data to help us understand how the Service is used and how we can improve it. You can opt out of analytics at any time through your cookie preferences.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Contract performance: Processing necessary to provide the Service to you, including account management, project data storage, and customer support.
  • Legitimate interest: Processing necessary for our legitimate business interests, such as improving the Service, ensuring security, and preventing fraud, where these interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, such as analytics cookies and marketing communications. You may withdraw consent at any time.
  • Legal obligation: Processing necessary to comply with applicable laws and regulations.

4. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Authenticate your identity and manage your account
  • Send transactional emails (account verification, password resets)
  • Respond to your support requests and inquiries
  • Analyze usage patterns to improve functionality and user experience
  • Detect, prevent, and address security issues and abuse
  • Comply with legal obligations

5. Third-Party Services

We share your information with the following third-party services, only to the extent necessary to provide the Service:

  • PostHog: Product analytics platform. With your consent, PostHog collects anonymized usage data. PostHog is configured to respect Do Not Track signals and cookie preferences.
  • Pagsukat ng conversion ng Google Ads: Itinatala na ang isang pagbisita ay nagdulot ng pag-sign up. Pinapanatiling tinanggihan ng Consent Mode ang imbakan para sa patalastas hanggang sa tanggapin mo ang mga hindi mahalagang cookie, at inaalis ang mga identifier ng pag-click sa patalastas hanggang doon.
  • Pagsukat ng website ng Google Analytics: Nilo-load ng parehong Google tag at hindi namin ito hiwalay na isinasaayos. Itinatala nito ang mga pahinang tinitingnan mo, ang uri ng iyong device at wika, at nakikilala ang bumabalik na bisita nang hanggang 400 araw. Walang iniimbak hanggang sa tanggapin mo ang mga hindi mahalagang cookie.
  • AI assistant na Anthropic (Claude): Kapag ikinonekta mo ang Claude sa iyong account. Ang mga resulta ng mga tool na tinatawag ng Claude (data ng project at story sa loob ng iyong access) ay ipinapadala sa Anthropic at sakop ng privacy policy ng Anthropic.
  • Pagsubaybay ng error ng Honeybadger: Tumatanggap ng mga ulat ng error sa server: ang uri ng error, mensahe at stack trace, ang path at method ng request, at ang iyong member ID. Hindi ipinapadala ang mga parameter ng request, body ng request, at data ng session.

Hindi namin ibinebenta ang iyong personal na data sa mga third party. Ibinabahagi namin ang data ng patalastas at pagsukat sa Google Ads at Google Analytics pagkatapos mo lamang tanggapin ang mga hindi mahalagang cookie.

Mga nakakonektang app at AI assistant

Maaari kang ikonekta sa iyong account ang isang third-party na app, gaya ng Claude ng Anthropic. Ang nakakonektang app ay kumikilos bilang ikaw sa bawat project na kinabibilangan mo, gamit ang mga pahintulot ng iyong role sa bawat isa. Sa pamamagitan ng tiyak na hanay ng mga tool, maaari itong magbasa at magsulat ng mga story, komento, may-ari ng story, iteration, epic, miyembro ng project at mention. Maaari itong mag-archive ng mga story, ngunit hindi nito kayang permanenteng magtanggal ng anumang bagay.

Pagsang-ayon

Ang bawat koneksyon ay nangangailangan ng iyong tahasang pag-apruba sa aming pahina ng pagsang-ayon, na nagpapakita ng app at ng account na pinagkakalooban ng access. Ang iyong password, second factor o passkey ay hindi kailanman ibinabahagi sa app.

Ang aming iniimbak

  • Ang minsanang authorization code, na iniimbak bilang SHA-256 hash. Mapapaso ito pagkalipas ng 5 minuto at magagamit nang minsan.
  • Ang access token ng app (isang ea_mcp_ key), na iniimbak sa anyong hash. Mapapaso ito pagkalipas ng 30 minuto.
  • Isang refresh token, na iniimbak bilang hash, na ipinapalit ng app para sa mga bagong access token. Pinapalitan ito sa bawat paggamit at mapapaso pagkalipas ng 30 araw.
  • Ang client identifier ng app (ang URL ng inilathalang metadata nito, na ang pangalan ay ipinapakita ng aming pahina ng pagsang-ayon) at ang redirect URI nito.
  • Kailan ginawa ang koneksyon at kailan ito huling ginamit.
  • Isang entry sa aming security audit log kapag ginawa ang koneksyon, na nagtatala ng client identifier ng app.

Data na ipinapadala sa nakakonektang app

Kapag tumatawag ang app ng isang tool, ang resulta (data ng project at story sa loob ng iyong access) ay ipinapadala sa app na iyon at pagkatapos ay sakop ng privacy policy ng provider ng app. Para sa Claude, tingnan ang Privacy Policy ng Anthropic. Tanging ang pangalan ng tool at ang mga argument ng bawat tawag ang aming natatanggap, hindi ang iyong pakikipag-usap sa app.

Pagbawi ng access

Maaari mong tingnan at bawiin ang bawat koneksyon sa Mga setting ng account → Mga nakakonektang app. Ang pagbawi ng koneksyon ay dinidisable ang mga access at refresh token nito, simula sa susunod na request ng app.

Pagpapanatili ng data

Ang mga ginamit o napasong authorization code, napasong refresh token at napasong access token ay awtomatikong tinatanggal ng cleanup job na tumatakbo bawat 5 minuto.

Pag-log

Para sa bawat request na ginagawa ng nakakonektang app, itinatala namin ang uri ng request, ang resulta nito at ang pangalan ng tool, hindi kailanman ang mga argument ng tool o ang mga halaga ng token. Kung ang pagtawag sa tool ay nabigo dahil sa server error, iniuulat namin ang error, ang pangalan ng tool at ang iyong member ID sa Honeybadger, ang aming provider ng error monitoring.

6. Cookies

We use cookies and similar technologies to operate the Service. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data is retained while your account is active and for 30 days after deletion to allow recovery.
  • Project data (stories, comments, history) is retained while the associated project exists.
  • Usage and analytics data is retained for up to 24 months, then aggregated or deleted.

You may request deletion of your data at any time by contacting us at privacy@eastagile.com or by deleting your account through the Service settings.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to data portability: Request your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interest.
  • Right to restrict processing: Request that we limit how we use your data.
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@eastagile.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Your Rights Under CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

  • Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to opt-out: Opt out of the "sale" of your personal information. Note: we do not sell personal information.
  • Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at privacy@eastagile.com. We will verify your identity before processing your request and respond within 45 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS) and at rest, access controls, regular security assessments, and employee training. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. International Data Transfers

Your data may be transferred to and processed in the United States. If you are located outside the United States, we ensure that appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

12. Children's Privacy

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and, where appropriate, by sending you an email notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

East Agile
Email: privacy@eastagile.com
Website: eastagiletracker.com