End User Privacy Policy

MAGIC APPS (“we”) welcomes you. This Privacy Notice or End User Privacy Policy (“End User Privacy Policy”) applies to our Atlassian application (“Magic Estimations” or “App”) available by following the link.

The End User Privacy Policy describes which of your personal data Magic Estimations collects, how stores, processes, and uses it, and what happens when you use the App.

About us

We are the controller of your personal data processed through the Magic Estimations. This means that we determine the purposes and means of personal data processing.


Email	support@magicapps.io – for general inquiries
	contact@magicapps.io – for general inquires including privacy related ones

About you

When you download Magic Estimations, you become our end user (“End User”).

We divide the End Users into categories so you can easily find details about the processing of your personal data. Pay attention that you can fall into several categories depending on your actions.

Type of End User	Description
End User	End User who downloads and uses the App
Session End User	End User who creates and participates in the estimation session
Feedback provider	End User who fills out the feedback form to provide feedback for improvement of the App
Please note! We do not knowingly process the personal data of End Users under the age of 16. If you are such an End User or you are a legal representative of such an End User, please contact us.

Personal data

Sources of data

We receive data when you download the App and interact with it, depending on your actions in the App and your device.

You can change your personal data in Magic Estimations by exercising your right to rectification or by the App functionality. Please note that the same lawful bases and storage terms apply to the changed data.

We may also receive data from third parties. It depends on your settings and the features you use.

Lawful bases for processing

To process your personal data, we rely on the following lawful bases:

performance of the contract — for the processing of personal data necessary for the negotiating on, conclusion, and performance of a contract (mainly, the End User Terms) with you;
legitimate interest — for the processing necessary for the development of our services, taking into consideration your interests, rights, and expectations;

legal obligation — for the processing as required by applicable laws (for example, to comply with tax or KYC/AML regulations) or if requested by a law enforcement agency, court, supervisory authority, or another state-authorized public body.

Technical End Users’ data

We collect some technical data about the End Users to optimize performance, debug issues, and enhance features while ensuring security and privacy to improve the overall user experience.

Most of the technical data we collect are anonymous, but some data is associated with your IP address and device ID. Please read about personal technical data below.

End User data	Reasons for processing	Lawful basis
Information about the сoarse location (IP address, country)	The optimization of the performance, debugging, enhancement of the features’ proper functioning, and improvement of the App	Legitimate interest
Identifiers (user ID)
Purchase history
Usage data (start and end date of using the App)
Technical device information (default settings) or network information (for example, IP address, HTTP user agent)
Data storage
We store the data for 3 years from its collection.

Session End Users’ data

We collect some of your data when you create and participate in the estimation session in Magic Estimations.

End User data	Reasons for processing	Lawful basis
Type of the session	To provide you with the functionality of the App	Performance of the contract
Name of the session
Estimation field
JQL
Preferred session configuration
Estimation values
Chat messages
Data storage
We store the data until you delete the estimation session.

Feedback providers’ data

We collect some of your data when you submit your feedback about the App.

End User data	Reasons for processing	Lawful basis
Your rating of the session	To use your feedback in our marketing activities	Legitimate interest
The text of the feedback
Data storage
We store the data for 6 years from feedback or the last communication on feedback.

Data received from third parties

We may receive some personal data from third parties.

The amount of data collected, the purposes, and the lawful basis for processing are determined by the respective privacy documents of these third parties.

Third party	Privacy documents
Google	Privacy Policy
Atlassian Marketplace	Privacy Policy
Sentry	Privacy Policy
Vercel	Privacy Policy
LogRocket	Privacy Policy
PayPro Global	Privacy Policy

In addition, we receive some data from PayPro Global when you buy a monthly or annual subscription to Magic Estimations. The data may include:

End User data	Reasons for processing	Lawful basis
Payment confirmation	To confirm your payment	Legal obligation
Date of the transaction
Purchased subscription details
Billing contacts
Data storage
We store the data for 6 years from the time you unsubscribe from your subscription.

We also receive some data, mainly usage data, from Atlassian Marketplace in order to place the App within the platform and provide you with its functionality. The data may include:

End User data	Reasons for processing	Lawful basis
Company’s and its representative data	To provide you with the functionality of the App	Performance of the contract
Hosting data
The number of End Users in Jira instance
Maintenance period (start and end date of using the App)
Atlassian identification (license ID and entitlement number)
Data storage
We store the data during your usage of the App.

We can share your personal data with third parties without any harm to you and in full compliance with applicable law. In addition, we have implemented organizational and technical measures to ensure the security of personal data during data transfer to third parties.

To share your data, we rely on the following lawful bases, depending on the case: consent, compliance with the law, and performance of a contract.

Third parties	Description
Analytics tools	We use analytics tools to understand and promote our business.
Contractors, and services providers on the App	We cooperate with service providers and contractors to provide you with their services, operate, develop, and improve the features and functionality of the App, fulfill your support requests, complete payment transactions, etc.
Providers of the services our team uses	We use CRM systems, messengers, and other services in our organisation to provide you with our services.
State authorities, courts, law enforcement agencies, etc	We may be obliged to transfer some of your data to tax authorities, courts, law enforcement agencies, and other governmental bodies: to comply with a government request, court order, or applicable law; to prevent unlawful use of the App; to protect against claims of third parties; to help prevent or investigate fraud.
To get a detailed list of the third-party recipients of your personal data, contact us.

The personal data we collect is stored on servers within the European Union for EEA end users and in the USA for US end users.

We may share personal data with the recipients in the USA and other countries, including non-EEA ones, ensuring that your data is protected and processed in accordance with the General Data Protection Regulation.

To share the data outside the EEA, we rely on the adequacy decision by the European Commission or the Data Privacy Framework participation of the recipient.

If the recipient does not participate in the Data Privacy Framework and its country is not deemed to provide an adequate level of protection for your personal data, we adopt Standard Contractual Clauses based on legislation assessments for data protection during transfer and storage.

You can read more detailed measures to protect your personal data here.

Data protection

We apply a variety of security measures appropriate to the possible risks.

Organizational measures


Staff training	Internal policies and instructions
Non-disclosure agreements (NDA)

Technical measures


Two-factor authentication	Backups
Firewalls	Encryption technologies

Data subjects rights

You, as a data subject (individual), have the right to interact with your data directly or through a request to us. This section describes these rights and how you can exercise them depending on your residency.

European Economic Area and United Kingdom residents

You, as a data subject, have the right to interact with its data directly or through a request to us. This section describes these rights and how you can exercise them:

Right	Description
Right to access	You can request an explanation of the processing of your personal data.
Right to rectification	You can change the data if it is inaccurate or incomplete.
Right to erasure	You can send us a request to delete your personal data from our systems. We will remove them unless otherwise provided by law.
Right to restrict the processing	You may partially or completely prohibit us from processing your personal data.
Right to data portability	You can request all the data you provided to us and request to transfer data to another controller.
Right to object	You may object to the processing of your personal data.
Right to withdraw consent	You can withdraw your consent at any time.
Right to file a complaint	If your request was not satisfied, you could file a complaint to the regulatory body.
To exercise your rights, contact us.
For EEA residents: We will answer your request within one month. If your request is not satisfied, you can submit a complaint to your local Data Protection Authority. You may find it here.
For UK residents: We will answer your request within one month. If your request is not satisfied, you can submit a complaint at the Information Commissioner’s Office via number 0303-123-1113 or go online at http://www.ico.org.uk/concerns .

United States residents

Your rights vary depending on the state of your residency, as indicated below.

Right	Description	Area
Right to access	You can request an explanation of the processing of your personal data.	California; Colorado; Connecticut; Indiana; Iowa;	Montana; Tennessee; Texas; Utah; Virginia.
Right to correct	You can change the data if it is inaccurate or incomplete.	California; Colorado; Connecticut; Indiana;	Montana; Tennessee; Texas; Virginia.
Right to delete	You can send us a request to delete your personal data from our systems.	California; Colorado; Connecticut; Indiana; Iowa;	Montana; Tennessee; Texas; Utah; Virginia.
Right to portability	You can request all the data you provided to us and request to transfer data to another controller.	California; Colorado; Connecticut; Indiana; Iowa;	Montana; Tennessee; Texas; Utah; Virginia.
Right to opt out of sales	The right to opt out of the sale of personal data to third parties.	California; Colorado; Connecticut; Indiana; Iowa;	Montana; Tennessee; Texas; Utah; Virginia.
Right to opt out of certain purposes	The right to opt out of processing for profiling/targeted advertising purposes.	Colorado; Connecticut; Indiana; Montana;	Tennessee; Texas; Utah; Virginia.
Right to opt out of the processing of sensitive data	The right to opt-out of processing of sensitive data.	California.
Right to opt in for sensitive data processing	The right to opt in before processing sensitive data.	Colorado; Connecticut; Indiana; Montana;	Tennessee; Texas; Virginia.
Right against automated decision-making	A prohibition against a business making decisions about a consumer based solely on an automated process without human input	California; Colorado; Connecticut; Indiana; Iowa;	Montana; Tennessee; Texas; Virginia.
Private right of action	The right to seek civil damages from a controller for violations of a statute.	California.
To exercise your rights, contact us.
We will answer your request within 30 to 60 days, depending on the state and legislative requirements. If your complaint is not satisfied, you can submit a complaint to the Federal Trade Commission.
Please note! Some states do not have privacy laws. The rights of residents of such states are governed by U.S. federal law. If your state is not on the list, please contact us.

Do not sell my personal information

California residents have the right under the California Consumer Privacy Act (“CCPA”) to opt out of the “sale” of their personal information by a company governed by CCPA.

Magic Apps does not sell your personal information to anyone nor use your data as a business model.

However, we support CCPA by allowing California residents to opt out of any future sale of their personal information. If you would like to record your preference that we will not sell your data in the future, please contact us.

Do-not-track requests

California residents using the App may request that we do not automatically gather and track information about their online browsing movements across the Internet.

Such requests are typically made through web browser settings that control signals or other mechanisms that allow consumers to exercise choice regarding collecting personal data about an individual consumer’s online activities over time and across third-party websites or online services.

We currently do not have the ability to honor these requests. We may modify this End User Privacy Policy as our abilities change.

Canada residents

You, as a data subject (individual), under The Personal Information Protection and Electronic Documents Act, Personal Information Protection Act of British Columbia, Personal Information Protection Act of Alberta, and Act respecting the protection of personal information in the private sector of Quebec have the right to interact with its data directly or through a request to us regarding privacy issues.

This section describes the privacy rights of Canadian residents and how they can exercise them:

Right	Description
Right to access	You can request an explanation of the processing of your personal data.
Right to rectification	You can change the data if it is inaccurate or incomplete via request or profile settings on the App.
Right to delete	You can send us a request to delete your personal data from our systems or delete your account via App settings. We will remove all data unless some of them we have to store in compliance with the law requirements.
Right to data portability	You can request all the data you provided to us and request to transfer data to another controller.
Right to object opt-out	You may object to the processing of your personal data.
Right to withdraw consent	You can withdraw your consent at any time.
Right not to be subject to automated decision-making	You can object to being subject to automated-based processing to know if there are consequences concerning them due to such processing.
Right to lodge a complaint	If your request is not satisfied, you can file a complaint to the regulatory body.
To exercise your rights, contact us.
We will answer your request within 30 days. If your complaint is not satisfied, you can file a complaint to the Office of the Privacy Commissioner of Canada.