Privacy policy

01Who we are

Pogon is a software factory operated by LambdaWorks. LambdaWorks decides how account data is used. For the work your organization brings into Pogon, such as tasks, code and comments, we act on your organization's instructions.

02What we collect

Account

Name, company email address, sign-in identities and organization membership.

Access requests

Name, company email and company you submit on pogon.ai.

Connected work

From Jira: Atlassian account IDs, display names, issue keys, titles, descriptions, statuses and comments in the projects your administrators connect. From source control: the repositories, branches and pull requests you connect.

Run records

Workflow runs, approvals, evidence, usage and cost records.

Operational data

Logs and diagnostics. Source code, prompts, credentials and personal data are kept out of telemetry.

03How we use it

To run the workflows your organization configures, route tasks to the right people and agents, show history and evidence, keep the service secure and answer support requests.

We don't sell personal data, use advertising trackers or train models on your content. Model inference runs through the providers your organization configures, under your agreements with them.

04Jira and Atlassian data

The Pogon app for Jira stores Atlassian account IDs with the work items it synchronizes and keeps that data longer than 24 hours, so runs and history stay accurate.

Pogon reads and writes Jira only within the scopes approved at installation and the permissions of the projects you connect. Private replies to a Pogon mention are shown only to the person who asked and expire after 30 days.

05Storage and security

Credentials and private content are encrypted at rest. Access is limited to the people who operate the service, and only when needed to run or support it.

06Sharing

We share data only with providers that run the service for us, such as hosting and email delivery; with the tools you connect, such as Atlassian and GitHub; and with the model providers your organization selects. We disclose data when the law requires it. The current list of providers is available on request.

07Retention and deletion

We keep account and organization data while your organization uses Pogon. Disconnecting Jira stops new synchronization. When you ask us to delete your account or your organization's data, we delete it unless the law requires us to keep a record.

08Your rights

You can ask to access, correct, export or delete your personal data, or object to how we use it. Email privacy@pogon.ai. If your organization manages your account, we may involve its administrators.

09Changes to this policy

We post updates on this page and change the effective date. We tell organization administrators about material changes before they take effect.