Atlassian
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- The documents do not say whether your data is sold or shared.
- The documents do not say who can read your content.
These pages are mostly headings and product add-ons; they do not spell out how Atlassian uses your data or AI chats.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
The documents do not say what they collect beyond a general promise to collect information.
Read the exact line
Privacy policy
“This privacy policy explains how Atlassian Pty Ltd, Atlassian US, Inc. and our corporate affiliates (“Atlassian”, “we”, “us”, “our”) collect, use, share, and protect your information”
Training
They say they use information and mention AI Terms, but those AI Terms are not in these documents.
Read the exact line
Terms of service
“AI Offerings Atlassian Pty Ltd and, for Loom AI, Loom, Inc. AI Terms”
Sharing
If your employer is the customer, Atlassian says it follows that company’s instructions, not this policy.
Read the exact line
Privacy policy
“When Atlassian processes personal information on behalf of our customers (such as your employer, if applicable), the customer is the of the personal information processed”
Kept
The documents do not say how long they keep your information.
Read the exact line
Privacy policy
“This privacy policy is intended to help you understand: Information we collect How we use information How we disclose information How we store and secure information How long we keep information”
Controls
They mention choices and access, but these excerpts do not describe any in-app switches.
Read the exact line
Privacy policy
“This privacy policy also explains your choices surrounding how we use information about you, which includes how you can object to certain uses of information about you”
Fine print
Product rules can skip refunds for some tools; public Trello profiles and Bitbucket repos are not private.
Read the exact line
Terms of service
“The “Return Policy” Section of the Agreement does not apply to Loom.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Ask your employer how they handle Atlassian data
Contact that organization directly, as the privacy policy instructs when Atlassian is a processor.
Read the separate AI Terms before using AI features
Product-Specific Terms table row “AI Offerings” / “AI Terms”.
Set Bitbucket repositories to private if needed
Bitbucket Cloud repository settings described in the Product-Specific Terms.
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Using the products means you accept this policy even though these pages do not explain the details.
Read the exact line
Privacy policy
“If you do not agree with this privacy policy, do not access or use our Services or interact with any other aspect of our business.”
For example, signing into Jira at work still counts as agreeing even if you never read the full policy.
If you use Atlassian through work, your employer’s rules apply, not Atlassian’s consumer-style promises.
Read the exact line
Privacy policy
“We are not responsible for the privacy or security practices of our customers, which may differ from those described in this privacy policy.”
For example, your company could keep tickets longer than you expect and Atlassian says that is not their problem.
Your Trello name, photo, and bio can be seen by anyone, not just your team.
Read the exact line
Terms of service
“In addition, profile information within Trello (for instance, a User’s username, full name, avatar and bio) is available to the public.”
For example, a stranger could search your Trello username and see your full name and avatar.
Code you put in a public Bitbucket repo can be viewed by anyone on the site.
Read the exact line
Terms of service
“Customer must designate whether the repositories are public (meaning that anyone coming to the Bitbucket website can view them) or private”
For example, if someone marks a repo public, your source files can show up in web searches.
The usual way to get money back does not apply to the DX product.
Read the exact line
Terms of service
“The “Return Policy” Section of the Agreement does not apply to DX.”
For example, if you buy DX and dislike it, these terms say the return policy does not cover it.
Loom also is carved out of the normal return policy.
Read the exact line
Terms of service
“The “Return Policy” Section of the Agreement does not apply to Loom.”
For example, a Loom subscription might not be refundable under the usual Atlassian return rules.
If Jira Align is down, you only get a small credit, not other compensation.
Read the exact line
Terms of service
“Service credits are Customer’s exclusive remedy and Atlassian’s entire for Atlassian’s failure to meet the Service Level Commitment.”
For example, a long outage might only knock a few percent off a future bill.
Free Trello can have storage or use limits added without warning.
Read the exact line
Terms of service
“Atlassian may create limits on use and storage at any time with or without notice for free Trello plans.”
For example, a free board could suddenly hit a new storage cap and stop accepting cards.
Most workplace use is under a different contract you may never see.
Read the exact line
Privacy policy
“please note that this privacy policy does not apply to the extent that we process personal information in the role of a processor or service provider on behalf of our customers”
For example, comments you type in Confluence at work are governed by your employer’s deal, not this page.
Words to know
Legal words from the lines above, in plain English.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- data controller
- The company that decides why and how your data is used, and is responsible for it under privacy law. For example, the app maker is the controller; the cloud company storing files for it is only a processor.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
How we got here · grade F · score 24/100 · 15 of 15 policy answers backed by a verified quote · 14 not stated
What does the app collect beyond what it needs to work?
Not stated in the documents.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
Not stated in the documents.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
Not stated in the documents.
Is there a real age gate, and are teens protected?
Not stated in the documents.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated August 17, 2026, but these pages do not say how they will notify you of changes.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 471 words at a professional or legal expert level (Flesch reading ease 24.4); the terms are 3,015 words at a college graduate level.
