Privacy Policy — JConnector (Jira Analytics for Claude)

Data Controller: Arunakumar Tavva · Effective: 15 June 2026 · Contact: arunakumariphone6@gmail.com

1. Overview

JConnector ("the Connector") is a remote Model Context Protocol (MCP) server that lets you use Anthropic's Claude to view read-only analytics about your Atlassian Jira data. By authorizing the Connector you consent to the processing described here.

2. Data we access

Using read-only OAuth scopes (read:jira-work, read:jira-user), the Connector reads, via Atlassian's official REST API:

Data	Purpose
Issue metadata (key, summary, status, type, priority, assignee, reporter, labels, sprint, story points, dates)	KPI, bug and productivity calculations returned to Claude
Project keys and names	Filtering and grouping
User display names	Assignee/reporter identification
Your Atlassian account identity and accessible sites	To call the correct Jira site on your behalf

The Connector is read-only; it never creates, modifies, or deletes Jira data.

3. Data we store

OAuth tokens. Your Atlassian access/refresh tokens and the OAuth client registration are stored in a managed PostgreSQL database (Supabase) to keep your connection working across sessions. Access is restricted to the Connector's server credentials.
We do not store your Jira issue content. Issues are fetched on demand, processed in memory to compute the requested analytics, and returned to Claude — not written to any database or log.
Logs may record timestamps, tool names and error codes for reliability; they contain no issue content or tokens.

4. How data is shared

With Anthropic / Claude: tool results are returned to Claude to answer your request (governed by Anthropic's Privacy Policy).
No other sharing. We do not sell, rent, or share your data with advertisers.
Subprocessors: Railway (hosting), Supabase (token storage), Atlassian (source of Jira data).

5. Security

All traffic uses HTTPS/TLS. Authentication is OAuth 2.1 with PKCE; no tokens are placed in URLs. Secrets live only in the hosting provider's secret store. Stored tokens are protected at the database level and reachable only by the Connector's backend credentials.

6. Retention & your choices

Tokens are retained only while your connection is active. Revoke any time by removing the connector in Claude and/or revoking the app at id.atlassian.com → Connected apps; revocation invalidates stored tokens. To request deletion of stored token data, email the contact above.

7. Children's privacy

The Connector is intended for workplace use and is not directed to anyone under 16.

8. Changes

We may update this policy; the "Effective" date will change accordingly.

9. Contact

Questions or deletion requests: arunakumariphone6@gmail.com