Stack Overflow for Teams Integrations Privacy Notice
Privacy Notice for Stack Overflow for Teams Integrations users
This Privacy Notice is applicable to users of any of our Stack Overflow for Teams integrations (“Integration(s)”), along with the Stack Overflow for Teams Privacy Notice, Stack Exchange Privacy Policy, Acceptable Use Policy, and associated licensing terms.
Stack Overflow for Teams is a software application tailored for sharing questions and answers within an organization, allowing authorized users to post privately within a company to share knowledge with peers and colleagues. Stack Overflow for Teams is owned and operated by Stack Exchange, Inc. (referred to herein as “Stack”, “we”, “us”). In addition to the Stack Overflow for Teams offering, we also offer various Integrations as described herein, and this Privacy Notice is intended to cover all variants.
At Stack, we are committed to ensuring effective data protection practices, particularly when processing personal information, and we take the privacy of our users seriously. In this Privacy Notice, you will find details about the types of personal information we collect in the course of provisioning and providing the Integrations, how we use that personal information, who is responsible for managing that personal information, our legal basis for doing so (as applicable), and what additional purposes the personal information will be used for and by whom.
For all other descriptions of how we collect, use, protect, share, and transfer personal information that we collect through the use of any other of our products and services, websites, or apps, or otherwise how/when you interact with us, as well as your rights, how you can exercise those rights, and how the law protects you, see our Stack Overflow for Teams Privacy Notice and Stack Exchange Privacy Policy.
If you have any questions about this Privacy Notice, the Stack Exchange Privacy Policy, or other questions related to the collection, processing, or our use of personal information in relation to Stack Overflow for Teams, please contact us at privacy@stackoverflow.com.
Stack as Data Controller and Processor
Stack is a global company with its headquarters in the United States (US). Accordingly, it should be appreciated that certain personal information may be accessed, used, processed, and/or transferred to the US and other countries or territories, as indicated on the Stack Overflow for Teams sub-processor list.
In providing the Integrations, we may process data in two ways: as a data processor, acting on behalf of an organization, or as a data controller, acting for our own purposes. This Privacy Notice covers our obligations as a data processor, processing personal data on behalf of an organization, but we also explain when we act as a data controller.
Data Processor
In its use of any Integration, the customer acts as a business and is considered to be the data controller/exporter in respect of personal information that is provided to Stack by the customer and its authorized users. During this engagement, Stack acts as a service provider and is considered to be the data processor/importer in respect of such personal information that is held or processed as a result of the provision of the Integrations.
It should be appreciated that it is the customer’s responsibility to comply with any applicable regulatory requirements, including issuing any privacy notices and establishing all required legal basis (e.g., consent), where required, for Stack to collect and process the personal information. Further, users are responsible for understanding their organization’s privacy policy to find out more about how personal information is processed and rights related thereto are available and can be exercised.
Data Controller
When users interact with an Integration, we may also collect and process certain information for our own purposes as a data controller. This includes personal information, such as login credentials and contact details.
What Information Do We Collect
The below tables indicate information collected and or generated in the course of providing each of the Integrations. It should be appreciated that certain information is required to be collected in order to provide the Integrations, some of which may be considered personally identifiable (e.g., User IDs, usernames, display names, etc.). Other information, such as event data and other aggregated data which at no time reveals any private, protected, or personal information contained within your instance, may be collected or generated (e.g., for Integration health and/or reporting purposes).
GitHub Enterprise Integration
Category | Details/Purpose |
---|---|
Authentication information | When you give GitHub permission to integrate with Stack Overflow for Teams Enterprise, we will collect and use certain identifiers, including the URL of your GitHub Enterprise instance and the your GitHub Enterprise access token. |
Microsoft Teams Integration
Category | Details/Purpose |
---|---|
Authentication information | When you give Microsoft Teams permission to integrate with Stack Overflow for Teams, we will collect and use certain identifiers, including your Tenant ID, User ID, and the URL of your Microsoft Teams instance. |
Slack Integration
Category | Details/Purpose |
---|---|
Authentication information | Authentication details and credentials for the Slack app, including the base URL for your Slack instance, an identifying key, and an access token. |
Workspace information | Slack workspace data including channel IDs and Slack usernames. |
Jira Integration
Category | Details/Purpose |
---|---|
Authentication information | Authentication details and credentials for the Jira app, including the base URL for your Jira instance, an identifying key, a client key token, and a shared secret token. |
Contributor information | The Jira display name of any contributor to a Jira ticket or comment. |
Project information | Certain project information about Jira tickets linked to inside Stack Overflow for Teams, including project key, number, title, description, reporter, assignee, comments, and other metadata. |
What We Use Personal Information For
We will use certain personal information for the following purposes:
- Contacting you (e.g., as required under the applicable agreement terms for any reason, notice of an updated policy or terms, in response to a support ticket, etc.).
- Note that this includes marketing emails from us, but only where we have received consent to provide such emails.
- Providing you with reporting and metrics relative to your engagement with an Integration.
- Compliance with a legal, contractual, or regulatory obligation.
We may additionally use certain personal information where it is in our legitimate interests, including our commercial interests or a third party’s legitimate interest in using the personal information. Examples include, but are not limited to, when we carry out analysis to understand how the Integrations are used and how we can improve them.
Whenever we rely on legitimate interests for processing, we ensure that we consider and balance our interests against the individual’s interests before processing. We do not process personal information on the basis of legitimate interest for activities where an individuals’ interests override Stack’s interests.
Who We Share Personal Information With
When providing the Integrations, we may employ third party companies and individuals (a.k.a., third-party service providers, sub-processors, etc.) to facilitate certain features and functions of the Integrations, such as to host, provide support services, or to assist us in analyzing how an Integration is being used (e.g., to improve the quality of our services, to provide reporting, etc.). For more information on this and other data privacy concerns, please refer to the Stack Overflow for Teams Privacy Notice.