Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“We are not responsible for the privacy or security practices of our customers, which may differ from those described in this privacy policy.”
“Our Services are not intended for use by anyone under the age of 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.”
“certain information about you, including your name, profile picture, contact info, content and past use of your account may become accessible to that organization's administrator and other Service users sharing the same domain.”
“We may disclose information about you to government authorities, law enforcement, or industry peers if we believe that sharing is reasonably necessary to (a) comply with any applicable law, regulation, legal process or enforceable governmental request...”
“this privacy policy does not apply to the extent that we process personal information in the role of a processor or service provider on behalf of our customers”
“We do not use or disclose sensitive personal information for purposes other than permitted under applicable law.”
This policy explains what information Atlassian collects about you, how it uses that information—including for targeted advertising—and who it may share it with, including your organization's administrator, colleagues on the same domain, and government authorities. If you use Atlassian through an employer or organization, much of how your data is actually handled falls under your organization's control, not this policy. You can opt out of targeted advertising using the 'Manage Preferences' control where local law makes that right available.
Atlassian's Privacy Policy establishes the conditions under which Atlassian collects, uses, shares, and retains personal information in its role as a data controller, while explicitly carving out processing activities Atlassian performs as a processor or service provider on behalf of its customers—which fall entirely outside this policy's scope. The document sets out Atlassian's use of personal information for operational purposes and for marketing, including targeted advertising, and discloses that cookies and tracking technologies are deployed by both Atlassian and third-party partners across Services and devices. Data sharing obligations are defined to include access by organizational administrators and domain-sharing users, disclosure to government and law enforcement where Atlassian determines compliance requires it, and access by connected third-party services. The policy restricts Services to users 16 and older, limits sensitive personal information use to purposes permitted under applicable law, and disclaims responsibility for the privacy or security practices of Atlassian's customers.
When you use Atlassian's Services through an organization, your name, profile picture, contact information, content, and account usage history may be accessible to your organization's administrator and other users sharing the same domain—not just Atlassian. Third-party services you connect to your account also receive access to your account information, including at minimum your name and email address. If you are subject to a local law that grants targeted advertising opt-out rights, you can exercise that right by clicking 'Manage Preferences' and following the instructions provided there.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
“We are not responsible for the privacy or security practices of our customers, which may differ from those described in this privacy policy.”
“Our Services are not intended for use by anyone under the age of 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.”
“certain information about you, including your name, profile picture, contact info, content and past use of your account may become accessible to that organization's administrator and other Service users sharing the same domain.”
“We may disclose information about you to government authorities, law enforcement, or industry peers if we believe that sharing is reasonably necessary to (a) comply with any applicable law, regulation, legal process or enforceable governmental request...”
“this privacy policy does not apply to the extent that we process personal information in the role of a processor or service provider on behalf of our customers”
“We do not use or disclose sensitive personal information for purposes other than permitted under applicable law.”
“Doing so may give third-party services access to your account and information about you, like your name and email address.”
“We may also use generative artificial intelligence in responding to your support related requests.”
“We collect information about your use, operation, and interaction with any of our Services, including when you connect third party services to or use those services with ours.”
“Atlassian and our third-party partners, such as our advertising and analytics partners, use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality, to recognize you across different Services and devices”
“Where applicable under local law, you may have the right to opt out of targeted advertising by clicking "Manage Preferences" and following the instructions.”
“We use information about you and how you use the Services for analysis, research and communications relating to marketing (including targeted advertising of products that may interest you), promotional activities, and business development.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Atlassian has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Atlassian Not Responsible For Customer Privacy Practices and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.