Effective date: 05 October 2026 | Last updated: 05 October 2026
1. Who We Are
Clovity Inc ("Clovity", "we", "us", "our") provides Atlassian-related products and services, including enterprise strategy advisory, professional services, migrations, implementations, managed ITSM support, customer success, Atlassian licence resale and renewals, and commercial Atlassian Marketplace applications. Our headquarters is at 11501 Dublin Blvd., #200, Dublin, California 94568, USA, and we have an operational office in Noida, Uttar Pradesh, India.
This Privacy Policy explains how we collect, use, disclose and protect personal information when you visit clovity.com, contact us, buy or use our services or Marketplace applications, or apply for a job with us. It covers our obligations under the EU and UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA"), and other applicable laws.
2. Our Role
- Controller: We are the controller (and a "business" under the CCPA) for personal information about website visitors, prospects, customer contacts, vendors and job applicants.
- Processor / service provider: When we deliver services or Marketplace applications, we may process data that our customers store in their Atlassian environments. We process that data only on our customer's instructions and under our agreement with them. If your data is held by one of our customers, please contact that customer to exercise your rights.
3. Personal Information We Collect
| Category | Examples | Source |
|---|---|---|
| Identifiers and contact details | Name, business email, phone number, company, job title, postal address | You, your employer, our website forms |
| Commercial information | Services and licences purchased, quotes, contracts, billing contact details | You, your employer |
| Support and communications | Support tickets, emails, call and meeting notes | You |
| Internet and device activity | IP address, browser type, pages viewed, cookie identifiers | Automatically, through cookies and similar technologies |
| Marketplace application data | Atlassian account ID, site URL, and the usage and configuration data needed to run the application | Atlassian and your use of the application |
| Professional and employment information (applicants) | CV, work history, education, references, interview notes | You, recruiters, references |
| Sensitive personal information (applicants and hires only) | Government ID number, bank account details for payroll, background-check results | You, background-check providers |
We do not knowingly collect personal information from children under 16.
4. How We Use Personal Information and Our Legal Bases (GDPR)
| Purpose | GDPR legal basis |
|---|---|
| Respond to enquiries and contact-form submissions | Legitimate interests; steps prior to entering a contract |
| Provide, support and bill for our services and applications | Performance of a contract |
| Manage customer and prospect relationships, and send B2B marketing (you can opt out at any time) | Legitimate interests; consent where required by law |
| Operate, secure and improve our website and applications, including analytics | Legitimate interests; consent for non-essential cookies |
| Recruit and onboard staff | Steps prior to entering a contract; legal obligation |
| Meet legal, tax, accounting and security obligations | Legal obligation |
| Establish, exercise or defend legal claims | Legitimate interests |
We do not use personal information for automated decision-making that produces legal or similarly significant effects.
5. How We Disclose Personal Information
We disclose personal information only to:
- Service providers and processors that act on our behalf under written contracts restricting their use of the data, including Google Workspace (email and collaboration), HubSpot (CRM and marketing) and Amazon Web Services (hosting).
- Atlassian, as needed to provide licences and Marketplace applications.
- Professional advisers, such as auditors, lawyers and insurers.
- Authorities, where required by law or to protect our rights, users or the public.
- A buyer or successor, in connection with a merger, acquisition or sale of assets.
6. Sale or Sharing of Personal Information (CCPA)
We do not sell personal information for money. In the past 12 months we have not sold personal information. However, our website may use third-party analytics and advertising cookies, and disclosing identifiers and internet activity through these cookies may count as "sharing" for cross-context behavioural advertising under the CCPA. You can opt out of this sharing at any time by:
- clicking the "Do Not Sell or Share My Personal Information" link in the footer of our website and turning off non-essential cookies;
- enabling a Global Privacy Control (GPC) signal in your browser, which we treat as a valid opt-out request for that browser; or
- emailing admin@clovity.com with the subject "Do Not Sell or Share".
We do not knowingly sell or share the personal information of consumers under 16.
7. Sensitive Personal Information
We collect sensitive personal information only from job applicants and hires, and only for recruitment, payroll, background checks and meeting our legal obligations. We do not use or disclose sensitive personal information to infer characteristics about you or for any purpose beyond those allowed by Cal. Code Regs. tit. 11, §7027(m). Because of this, the CCPA right to limit does not strictly apply, but you may still ask us to limit our use of your sensitive personal information by emailing admin@clovity.com with the subject "Limit the Use of My Sensitive Personal Information". Under the GDPR, we process special category data only where Article 9 permits it, for example to meet employment-law obligations.
8. Your Privacy Rights
GDPR (EEA and UK residents)
- Access your personal data
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Object to processing based on legitimate interests, including direct marketing
- Withdraw consent at any time, without affecting earlier processing
- Lodge a complaint with your local data protection supervisory authority
CCPA (California residents)
- Right to know / access: the categories and specific pieces of personal information we collected, its sources, our purposes, and who we disclosed it to
- Right to delete personal information we collected from you, subject to legal exceptions
- Right to correct inaccurate personal information
- Right to opt out of sale or sharing (see Section 6)
- Right to limit the use and disclosure of sensitive personal information (see Section 7)
- Right to non-discrimination: we will not deny services, charge different prices or give a lower quality of service because you exercised your rights
9. How to Exercise Your Rights
- Email: admin@clovity.com (subject: "Privacy Request")
- Post: Privacy Team, Clovity Inc, 11501 Dublin Blvd., #200, Dublin, CA 94568, USA
- Opt-out of sale or sharing: the "Do Not Sell or Share My Personal Information" link, or a GPC signal (see Section 6)
We will verify your identity by matching the information you give us with the information we hold. An authorised agent may submit a request with your signed permission, and we may ask you to confirm your identity directly. We will confirm receipt of a CCPA request within 10 business days and respond within 45 days, which we may extend once by another 45 days with notice to you. We respond to GDPR requests within one month, which we may extend by two further months for complex requests. If we decline a request, we will explain why and, where applicable, how to appeal. Opt-out requests are actioned within 15 business days.
10. International Transfers
We are based in the United States and have staff in India, so your personal information may be processed outside your country. When we transfer personal data out of the EEA or UK, we use the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism.
11. Retention
We keep personal information only as long as needed for the purposes described above: for the duration of the customer relationship plus the period required by tax, accounting and legal obligations; up to 24 months for unsuccessful job applicants; and at least 24 months for records of privacy requests. When personal information is no longer needed, we securely delete or anonymise it.
12. Security
We protect personal information with administrative, technical and physical safeguards, including role-based access control, multi-factor authentication, encryption in transit and at rest, logging and monitoring, and staff security training. Our information security programme is aligned with ISO/IEC 27001:2022.
13. Cookies
We use strictly necessary cookies to run our website and, with your consent where required, analytics and advertising cookies. You can manage cookies through our cookie banner, your browser settings or a GPC signal.
14. Changes to This Policy
We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, notify you where required. We review this Policy at least every 12 months.
15. Contact Us
Privacy questions or complaints: admin@clovity.com. Information security matters: Chief Information Security Officer, ciso@clovity.com. Postal address: Clovity Inc, 11501 Dublin Blvd., #200, Dublin, CA 94568, USA.