Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your data.

Last updated: January 4, 2026

Overview

IssueCapture ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the service.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last updated" date of this Privacy Policy.

Information We Collect

  • Account information (name, email, company)
  • Issue data submitted through the widget, including attachments
  • Widget usage analytics (widget opens and page URL) without IP addresses or cookies
  • Security records: your IP address and browser when you accept our terms at signup, connect Jira, or perform security-relevant account actions (API keys, team changes, retention settings, account deletion), and briefly when we rate-limit requests
  • Technical information (browser type, device) when you submit an issue

How We Use Your Data

  • To provide and maintain our service
  • To notify you about changes to our service
  • To provide customer support
  • To gather analysis or valuable information to improve our service

Data Security

  • TLS/HTTPS encryption for all data in transit
  • AES-256 encryption for sensitive stored credentials
  • Built on SOC 2 Type II certified hosting providers
  • Row Level Security for tenant data isolation

Data Retention

  • Account data retained while your account is active
  • Issue submissions (including attachments) are retained for up to 90 days by default to queue Jira creation and power features like duplicate detection
  • Embeddings are retained for 90 days by default
  • Account audit logs (including IP address and browser) are retained for 365 days by default; Business and Enterprise plans can change this
  • Fraud-prevention signals are retained for 90 days; signup consent records are deleted with your account
  • Usage records of each issue are kept for your billing history and analytics; the reporter's email, name and browser details are removed from them after 90 days
  • API request metrics are retained for 30 days and contain no IP addresses or browser details
  • A minimal account-deletion record is kept after you delete your account, and its personal details are removed 30 days after the deletion completes
  • Business and Enterprise plans can customize retention settings for issue data, logs, screenshots, and embeddings
  • Account owners can delete their account from Settings or contact us
  • Database backups maintained per hosting provider policies

Your Rights

  • Access your account information through the dashboard
  • Request correction of inaccurate data
  • Request deletion of your account and data, subject to limited retention in backups or legal obligations
  • Contact us for data-related requests

Contact Us

  • Email: privacy@issuecapture.com
  • Response time: We aim to respond within 48 hours
  • We will assist with any privacy-related requests

GDPR Compliance

No consent banner required

IssueCapture's widget analytics don't require cookie consent banners: no cookies, and no IP addresses are stored for your end users. Issue submissions require explicit user action (filling out and submitting the form). We don't use IP addresses for tracking or analytics. We store them only where needed for security: rate limiting (about an hour at most), fraud prevention, signup consent records, your account's audit log (365 days by default, configurable on Business and Enterprise plans) and a minimal record of account deletions. Our hosting providers also process IP addresses in their request logs under their own retention policies.

Explicit Consent

We collect explicit consent during signup (checkbox or OAuth acknowledgment) and keep an audit trail with timestamp, consent method, IP address and browser.

Right to Deletion

Account owners can delete their account and its data directly from the Settings page; a minimal deletion record (personal details removed after 30 days) and provider backups are retained for a limited period.

Right to Access

Contact privacy@issuecapture.com to request a copy of your data. We will respond within 48 hours with all personal information we hold about you.

Data Minimization

We only collect data necessary to provide our service. We do not sell your personal information to third parties, ever.

Third-Party Services

We use third-party services to help us operate. Your data may be processed by these services as part of providing our service:

Cloud Hosting

Application hosting and delivery

Database

Data storage and authentication

Payment Processing

Credit card transactions (PCI compliant)

AI Processing

When AI features are on: issue text, page URL, browser details, console and network capture and screenshots. Reporter name and email are not sent. Not used for training.

Jira

Issue creation via your connection

Analytics

Marketing-site analytics (GoatCounter, Vercel Analytics): cookieless; we store no IP addresses

We select providers with strong security practices. See the full list at issuecapture.com/subprocessors, or contact us if you need specific details about our service providers.

We Do Not Sell Your Data

IssueCapture does not sell, rent, or share your personal information with third parties for their marketing purposes. Ever.

  • We do not sell personal information to data brokers
  • We do not share data for cross-context behavioral advertising
  • We do not monetize your data in any way beyond providing you with our service
  • Issue content primarily goes to your Jira; we retain limited issue data, including attachments, to process submissions and power features, with retention controls available

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know

You can request what personal information we collect about you and how we use it. Contact privacy@issuecapture.com.

Right to Delete

Delete your account and request deletion of personal information from Settings, or contact us. We complete requests within 45 days, subject to limited retention in backups or legal obligations.

Right to Correct

Request correction of inaccurate personal information by contacting privacy@issuecapture.com.

No Sale of Data

We do not sell or share your personal information. No "Do Not Sell" opt-out needed because we simply don't do it.

We will not discriminate against you for exercising any of these rights.

International Privacy Rights

We respect privacy laws globally and provide the same core rights to all users, regardless of location:

European Union (GDPR)

Full GDPR compliance with explicit consent, right to deletion, access, and data portability.

United Kingdom (UK GDPR)

Post-Brexit UK data protection compliance with identical protections to EU GDPR.

Canada (PIPEDA)

We follow PIPEDA principles for consent, limiting collection, and providing access to your data.

Australia (Privacy Act)

We adhere to Australian Privacy Principles (APPs) for collection, use, and disclosure of personal information.

Brazil (LGPD)

Our practices align with Brazil's General Data Protection Law requirements for consent and data subject rights.

All Other Regions

Same rights apply globally: access your data, request deletion, and receive transparent information about our practices.

Contact privacy@issuecapture.com to exercise any of these rights, regardless of where you're located.

Have questions about our privacy policy?

Contact Privacy Team