Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is Atlassian's privacy policy, which covers Loom (the video messaging tool) alongside all other Atlassian products like Jira and Confluence. The most important thing for Loom users is that video recordings, transcripts, and viewing behavior you generate on Loom may be collected and used by Atlassian for product improvement, analytics, and potentially AI feature development. If you are an EU resident or California resident, you have specific rights to access, delete, or restrict processing of your personal data, and you can exercise those rights through Atlassian's privacy request portal.
This document is Atlassian's global privacy policy, which governs data collection and processing across Atlassian's product suite including Loom, following Atlassian's 2023 acquisition of Loom. The policy states it covers information collected through Atlassian websites, products, and services, asserting legal bases including contractual necessity, legitimate interests, and consent for processing personal data. Notable provisions include the collection of video content and associated metadata through Loom, behavioral and usage analytics across the Atlassian platform, and data sharing with third-party service providers, resellers, and affiliated entities; the policy also reserves rights to process data for AI model improvement and product development purposes, which engages considerations beyond standard SaaS data processing disclosures. The policy engages GDPR for EU/EEA users, the UK GDPR post-Brexit, CCPA and CPRA for California residents, Australia's Privacy Act, and other regional frameworks; Atlassian designates itself as data controller for account and usage data while acting as data processor for customer-uploaded content in enterprise contexts, a dual-role structure that creates distinct compliance obligations depending on deployment type. Material compliance considerations include the adequacy of consent mechanisms for AI training on video content, the scope of cross-border data transfers under Standard Contractual Clauses, and the delineation of controller versus processor responsibilities in enterprise and reseller arrangements.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trialMonitoring
Loom has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Employer/Administrator Access to User Data and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.