Privacy Policy

最后更新：2026年9月15日

1. Introduction

East Agile ("Company", "we", "us", or "our"), a California corporation, operates East Agile Tracker at eastagiletracker.com ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are the data controller for the personal data we process through the Service. We are committed to protecting your privacy and handling your data in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Name and display name
  • Email address
  • Password (stored in hashed form)
  • Organization or company name (if provided)

Usage Data

We automatically collect information about how you interact with the Service:

  • Pages viewed and features used
  • Actions performed (e.g., creating stories, updating projects)
  • Date and time of access
  • Browser type and version
  • Device type and operating system
  • IP address

Analytics Data

We use PostHog for product analytics. If you consent to analytics cookies, PostHog collects anonymized usage data to help us understand how the Service is used and how we can improve it. You can opt out of analytics at any time through your cookie preferences.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Contract performance: Processing necessary to provide the Service to you, including account management, project data storage, and customer support.
  • Legitimate interest: Processing necessary for our legitimate business interests, such as improving the Service, ensuring security, and preventing fraud, where these interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, such as analytics cookies and marketing communications. You may withdraw consent at any time.
  • Legal obligation: Processing necessary to comply with applicable laws and regulations.

4. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Authenticate your identity and manage your account
  • Send transactional emails (account verification, password resets)
  • Respond to your support requests and inquiries
  • Analyze usage patterns to improve functionality and user experience
  • Detect, prevent, and address security issues and abuse
  • Comply with legal obligations

5. Third-Party Services

We share your information with the following third-party services, only to the extent necessary to provide the Service:

  • PostHog: Product analytics platform. With your consent, PostHog collects anonymized usage data. PostHog is configured to respect Do Not Track signals and cookie preferences.
  • Google Ads 转化衡量： 记录访问是否带来了注册。同意模式会将广告存储保持为拒绝状态，直到您接受非必要 Cookie，在此之前广告点击标识符会被删除。
  • Google Analytics 网站衡量： 由同一个 Google 代码加载，并非由我们单独配置。它会记录您浏览的页面、设备类型和语言，并在最长 400 天内识别回访者。在您接受非必要 Cookie 之前，不会存储任何内容。
  • Anthropic（Claude）AI 助手： 仅在你将 Claude 连接到账户时适用。Claude 调用的工具所返回的结果（你有权访问的项目和故事数据）会发送给 Anthropic，并受 Anthropic 自身隐私政策的约束。
  • Honeybadger 错误监控： 接收服务器错误报告：错误类别、消息和堆栈跟踪、请求路径和方法，以及你的成员 ID。不会发送请求参数、请求正文或会话数据。

我们不会将您的个人数据出售给第三方。只有在您接受非必要 Cookie 之后，我们才会与 Google Ads 和 Google Analytics 共享广告和衡量数据。

已连接的应用和 AI 助手

你可以将第三方应用（例如 Anthropic 的 Claude）连接到你的账户。已连接的应用会在你所属的每个项目中以你的身份操作，并在各项目中使用你自己角色的权限。通过一组固定的工具，它可以读写故事、评论、故事负责人、迭代、史诗、项目成员和提及。它可以归档故事，但不能永久删除任何内容。

同意

每次连接都需要你在我们的授权同意页面上明确批准，该页面会显示应用名称以及获得访问权限的账户。你的密码、第二因素或通行密钥绝不会与应用共享。

我们存储的内容

  • 一次性授权码，以 SHA-256 哈希形式存储。5 分钟后过期，且只能使用一次。
  • 应用的访问令牌（ea_mcp_ 密钥），以哈希形式存储。30 分钟后过期。
  • 刷新令牌，以哈希形式存储，应用用它换取新的访问令牌。每次使用后都会被替换，30 天后过期。
  • 应用的客户端标识符（其发布的元数据的 URL，我们的授权同意页面会显示其中的名称）及其重定向 URI。
  • 连接的创建时间和最后使用时间。
  • 建立连接时写入安全审计日志的一条记录，其中记录应用的客户端标识符。

发送给已连接应用的数据

当应用调用工具时，结果（你有权访问的项目和故事数据）会发送给该应用，此后受该应用提供方的隐私政策约束。关于 Claude，请参阅 Anthropic 隐私政策。我们只接收工具名称和每次调用的参数，不会接收你与应用的对话内容。

撤销访问权限

你可以在“账户设置 → 已连接的应用”中查看并撤销每个连接。撤销连接后，其访问令牌和刷新令牌将从应用的下一次请求起失效。

保留期限

已使用或已过期的授权码、已过期的刷新令牌和已过期的访问令牌，会由每 5 分钟运行一次的清理任务自动删除。

日志记录

对于已连接应用发出的每个请求，我们记录请求类型、结果和工具名称，绝不记录工具参数或令牌值。如果工具调用因服务器错误而失败，我们会将错误、工具名称和你的成员 ID 报告给我们的错误监控服务提供商 Honeybadger。

6. Cookies

We use cookies and similar technologies to operate the Service. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data is retained while your account is active and for 30 days after deletion to allow recovery.
  • Project data (stories, comments, history) is retained while the associated project exists.
  • Usage and analytics data is retained for up to 24 months, then aggregated or deleted.

You may request deletion of your data at any time by contacting us at privacy@eastagile.com or by deleting your account through the Service settings.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to data portability: Request your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interest.
  • Right to restrict processing: Request that we limit how we use your data.
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@eastagile.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Your Rights Under CCPA

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

  • Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to opt-out: Opt out of the "sale" of your personal information. Note: we do not sell personal information.
  • Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at privacy@eastagile.com. We will verify your identity before processing your request and respond within 45 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS) and at rest, access controls, regular security assessments, and employee training. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. International Data Transfers

Your data may be transferred to and processed in the United States. If you are located outside the United States, we ensure that appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

12. Children's Privacy

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and, where appropriate, by sending you an email notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

East Agile
Email: privacy@eastagile.com
Website: eastagiletracker.com