/
Privacy Policy

Privacy Policy

Last updated: (July 29, 2026)

 

Introduction

Open Source Consulting Inc. (hereafter: "We") processes personal data of people that use Open Source Consulting Inc.'s Apps. We do this in order to provide our products and services and to achieve our goals. In this privacy policy, we explain why and how we process your personal data.

By using Open Source Consulting Inc.'s Apps you agree to this privacy policy. If you do not agree to this privacy policy, you must not use Open Source Consulting Inc.'s Apps.

We have a Privacy Officer in place who is committed to supporting us with GDPR compliance for our Apps. We are happy to help you with questions about data privacy. Should you have any questions or concerns, please contact us at https://cloud-osci.atlassian.net/helpcenter/app/.

Our Privacy Officer, appointed under Article 31 of the Korean Personal Information Protection Act ("PIPA"), is: [Name], [Title]. Contact: [email address], [telephone number]. The Privacy Officer is responsible for handling complaints and remedying damage arising from personal data processing, and for internal supervision of our compliance with this Policy.

 

1. Who We Are

We are Open Source Consulting Inc. This Privacy Policy governs all data processing activities in relation to our Atlassian Apps for which we are to be regarded as the Data Controller. However, in order to make it as clear as possible what personal data we process and how we deal with that personal data, we differentiate between several data processing activities.

The registered office of Open Source Consulting Inc. is located at:
5F, Narakiium Samseong-dong A Building,
32 Teheran-ro 83-gil, Gangnam-gu,
Seoul, Republic of Korea.

 

2. Definitions

Below we introduce some definitions to provide a clear understanding of the terms used in this privacy policy:

License Agreement: The license agreement concluded between Open Source Consulting Inc. and the Licensee for the use of the Apps.

Licensee: The party that has a License Agreement with Open Source Consulting Inc.

End User: The natural person who uses the Apps.

Services: The products and services provided by Open Source Consulting Inc., including the Apps, related support and maintenance services, and other services provided to customers and End Users.

Apps: The actual software app or apps developed by Open Source Consulting Inc. that function as add-ons or plugins to Atlassian products such as Confluence and Jira. These include Updates and/or Upgrades and user documentation, which Open Source Consulting Inc. makes available to the Licensee and its End Users that have accepted the End User License Agreement.

Cloud: Hosting option for Apps where the App runs in Atlassian’s SaaS environment. Our Apps are executed on hosting servers provided by AWS, while Atlassian manages the overall SaaS infrastructure.

Data Center: Hosting option for Apps where the App is downloaded and installed in an on-premises environment fully managed by the customer.

 

3. Scope of This Policy

This policy covers how we collect, process, store, and protect personal data when you:

  • Visit our website (https://cloud-osci.atlassian.net/helpcenter/app/)

  • Fill in contact or demo forms

  • Schedule a meeting using external tools

  • Use our application (Open Source Consulting Cloud, SaaS, or Data Center apps)

  • Interact with our support or sales team

  1. What Data We Collect

a) Website Visitors

We collect:

  • Name, user email, and company name (via forms in Jira Service Management)

  • Device and browser information

  • Pages visited, time on site, and IP address

  • Cookie consent status

  • Tools used: Jira Service Management, Google Analytics, Google Ads, and LinkedIn Ads

b) App Users (Open Source Consulting Inc.)

We process:

Contact data: Name, user email, user name, and any other personal data that you may provide us directly.

Feedback data: Name, user email, and any other personal data that you may provide us directly.

Welcome emails: Name, user email, and data about your activity with regard to our drip-feed emails.

In-app analytics: User ID/Account ID, Tenant ID, and location.

Connection details: Confluence or Jira Cloud URL, user email, and encrypted personal access token.

Synchronization configuration profiles: Mapped statuses, issue types, field values, and user email mappings.

  • For Confluence or Jira Cloud: This data is stored securely.

  • For Confluence or Jira Data Center: No data is stored.

 

5. How We Use Your Data

Communication: To provide customer support, respond to inquiries, and send notifications.

Provision of our Apps: To create user accounts, process billing, manage accounts, and notify users of system maintenance.

Product and service improvement: To analyze feedback and usage data in order to maintain and enhance the quality of our Apps, including through dashboards and trend analysis.

Research and reporting: To generate and share reports based on anonymized and aggregated data.

Drip email communication: To provide learning and onboarding emails following app installation.

Service optimization: To track user interactions via Google Analytics, including click behavior and navigation paths, in order to improve our services.

 

6. Legal Grounds for Processing

We process your personal data based on the following legal grounds:

  • Performance of a contract or preparation of a contract: For communication, provision of our Apps, and service improvement.

  • Legitimate interest: For direct marketing purposes not involving cookies or online tracking technologies.

  • Consent: For marketing activities requiring explicit consent.

 

7. Sensitive Data

We do not collect or process sensitive data.

 

8. Personal Data of Minors

We do not process personal data of minors (under the age of 16) as a general rule. If we become aware that personal data of a minor has been collected without the consent of a parent or legal guardian, we will take steps to delete such data.

 

9. Data Subjects’ Rights

As a data subject, you have several rights regarding the personal data we process. We strive to fully respect and uphold these rights. To exercise your rights, please submit a request to https://cloud-osci.atlassian.net/helpcenter/app/.

  • Access and information

  • Rectification

  • Erasure (Right to be forgotten)

  • Restriction of processing

  • Objection to processing

  • Data portability

You may also:

  • Withdraw consent (e.g., unsubscribe from newsletters or opt out of in-app analytics)

  • File a complaint (with us or with a competent supervisory authority)

 

10. Retention Periods

In the event that (i) a customer’s license agreement expires or (ii)a request for deletion of personal data is submitted, any unique information that can identify an individual will be permanently deleted without delay and processed in a manner that prevents recovery or reuse for any reason. If a request for deletion of personal data by the Licensee is made prior to the expiration of the license agreement, this will be deemed as agreement that the request also constitutes termination of the license agreement.

Please note that if the license agreement expires, automatic termination may affect the availability of customer support services. In such cases, customers may contact our Support team to receive guidance on the applicable termination procedures and complete the process individually.

In addition, when the purpose of collecting or providing personal data has been fulfilled, the Company will promptly dispose of the customer’s personal data without delay.

 

11. Subprocessors & Data Sharing

We do not sell, rent, or trade personal data — ever.

We only share data with trusted vendors (“subprocessors”) essential for delivering our services:

Category

Subprocessors

Infrastructure

AWS, Google Cloud, Atlassian Cloud

Productivity

Slack, Salesforce, http://monday.com

Support

Atlassian Jira Service Management

Marketing & Analytics

Google Analytics 4, LinkedIn Ads
(used with your consent)

 

We transfer the following categories of personal data outside the Republic of Korea, as necessary for the performance of the License Agreement

Recipient

Country

Data Transferred

Purpose

Retention Period

AWS

Republic of Korea (Seoul Region) and Germany (Frankfurt Region)

N/A

Provision of cloud infrastructure services (compute, storage, and networking) supporting the operation of internal systems and services

For the duration of the service agreement; deleted upon contract termination in accordance with AWS terms and applicable law

Google Workspace (Google LLC)

United States (and other countries where Google or its subprocessors maintain facilities)

Account information (name, email address), email content and attachments, documents, calendar, and contacts processed while using the service

Provision of cloud-based email, document, and collaboration services (Google Workspace)

For the duration of the service agreement; deleted upon contract termination in accordance with Google's terms and applicable law

Atlassian Cloud

Determined by the data residency setting of the customer's Atlassian instance

Customer instance data accessed/stored by the app; user account ID and email address

Hosting and execution of the Forge app, and data storage

For the duration of the contract; deleted upon app uninstallation

Slack

United States (and other countries where Slack/Salesforce or their subprocessors maintain facilities)

Account information (name, email address), messages, and files shared within Slack workspaces

Provision of team communication and messaging services (Slack)

For the duration of the service agreement; deleted upon contract termination in accordance with Slack's terms and applicable law

Salesforce

Republic of Korea (primary data hosting); other countries in which Salesforce affiliates and subprocessors provide support or processing services, as applicable

User name, business email address, company name, department, job title, account information, access logs, and personal data contained in customer, prospect, and opportunity records entered into Salesforce

Provision and operation of CRM services; management of customer and sales opportunity information; data hosting, maintenance, and technical support

For the duration of the Services and thereafter until deletion in accordance with the Salesforce DPA and applicable data retention and deletion policies

http://monday.com

United States,

European Union

(Germany), Asia

Pacific (Australia),

Israel, and other

countries where

applicable

subprocessors

process data

User credentials,

profile

information,

usage analytics,

automation

metadata, and

Customer Data

uploaded to

http://monday.com ,

including files,

images, items,

updates, and other content

Provision and

operation of

http://monday.com

services;

hosting and

processing of

Customer Data;

account

administration,

maintenance,

security,

technical support, and

related service

operations

For the duration

of the Services

and, upon

account closure

and a request for

deletion,

Customer Data

will be deleted

within 90 days

(30-day rollback

period +

additional 60 days for deletion from

http://monday.com and

subprocessors'

databases).

Google Analytics 4

United States

IP address, Cookie ID, device/browser info, website navigation and behavior logs

Website traffic statistics analysis and user behavior measurement

In accordance with GA4 data retention settings (default: 2 or 14 months)

LinkedIn Ads

United States

Cookie ID, IP address, ad engagement data, lead form responses

Direct marketing, targeted advertising, and campaign performance measurement

Until fulfillment of the processing purpose or withdrawal of consent

You may object to this transfer at any time by contacting us at OSCI Service Desk.
Because such transfer is necessary to provide the Services, refusal will mean we are unable to continue providing the Services, and may result in suspension or termination of your access to the Apps.

 

12. Your Rights

Under GDPR (EEA/UK residents), you have the right to:

  • Access your personal data

  • Request correction or deletion

  • Withdraw your consent

  • Object to processing

  • Lodge a complaint with your Data Protection Authority

Under CCPA (California residents), you have the right to:

  • Know what personal data we collect

  • Request deletion of your data

  • Opt out of any “sale” or “sharing” of personal data

Note: Open Source Consulting does not sell, rent, or trade your personal data. We use personal data solely for the purpose of providing our services and do not disclose it for third-party resale.

 

13. Data Security

We follow industry best practices to safeguard your data, including:

  • End-to-end encryption

  • Role-based access control

  • Secure software development lifecycle

  • Continuous security monitoring

14. Contact Us

For any privacy-related inquiries or to exercise your rights, please reach out:

 

Data Protection Contact: OSCI Service Desk

Personal Information Protection Officer:

  • Name: Brian Han

  • Title: Security Officer (President)

  • Email: security@osci.kr

  • Telephone: +82-2-516-0711

 

Address
32, Teheran-ro 83-gil, Gangnam-gu - 06167, Seoul, Korea (South)