Privacy Policy

Last updated: March 30, 2026

1. Introduction

SleepJiraBot ("the Bot", "we", "our") is a Telegram bot that integrates with Atlassian Jira Cloud. This Privacy Policy describes how we collect, use, and protect your information when you use the Bot.

2. Information We Collect

When you use the Bot, we collect and store the following data:

• Telegram User ID — to identify your account within the Bot.
• Jira OAuth 2.0 Tokens (access token and refresh token) — to authenticate API requests to your Jira Cloud instance on your behalf.
• Jira Cloud ID and Account ID — to associate your Telegram account with your Atlassian account.
• Subscription preferences — projects, issues, or filters you choose to subscribe to.
• Scheduled report configurations — JQL queries and cron expressions you configure.
• Language preference — your chosen interface language (English or Russian).

3. Information We Do NOT Collect

• We do not collect or store your Jira password.
• We do not collect or store your Telegram messages beyond bot commands.
• We do not collect any personal data beyond what is listed above.
• We do not use cookies or tracking technologies.

4. How We Use Your Information

Your information is used solely to:

• Authenticate with Jira Cloud on your behalf via OAuth 2.0.
• Deliver Jira issue notifications and updates to your Telegram chat.
• Execute scheduled reports and subscription queries.

5. Data Storage and Security

• All Jira OAuth tokens are encrypted using AES-256-GCM before being stored in the database.
• Data is stored in a MongoDB database accessible only from the internal network.
• All external communications are encrypted via HTTPS/TLS.
• The Bot uses OAuth 2.0 with minimal required scopes and does not request more permissions than necessary.

6. Data Sharing

We do not sell, trade, or share your data with any third parties. Your data is only transmitted to:

• Atlassian Jira Cloud API — to fulfill your requests (viewing issues, updating statuses, etc.).
• Telegram Bot API — to send you messages and notifications.

7. Data Retention and Deletion

Your data is retained as long as your account is connected to the Bot. You can delete all your data at any time by using the /disconnect command in Telegram, which will:

• Revoke and delete your Jira OAuth tokens.
• Remove all your subscriptions and scheduled reports.
• Delete your user record from the database.

8. Atlassian Marketplace Compliance

This Bot accesses Jira Cloud via the Atlassian API using OAuth 2.0 (3LO). It complies with:

• Atlassian Security Requirements
• Atlassian Privacy Policy

9. Your Rights

You have the right to:

• Access the data we hold about you (via /me command).
• Delete all your data (via /disconnect command).
• Revoke the Bot's access to your Jira account at any time through your Atlassian account settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last updated" date.

11. Contact

If you have questions about this Privacy Policy, please open an issue on GitHub or contact us via Telegram.

← Back to SleepJiraBot