Stack Overflow for Teams is a software application tailored for sharing questions and answers within an organization, allowing authorized users to post privately within a company to share knowledge with peers and colleagues. Stack Overflow for Teams is owned and operated by Stack Exchange, Inc. (referred to herein as “Stack”, “we”, “us”). In addition to the Stack Overflow for Teams offering, we also offer various Integrations as described herein, and this Privacy Notice is intended to cover all variants.
At Stack, we are committed to ensuring effective data protection practices, particularly when processing personal information, and we take the privacy of our users seriously. In this Privacy Notice, you will find details about the types of personal information we collect in the course of provisioning and providing the Integrations, how we use that personal information, who is responsible for managing that personal information, our legal basis for doing so (as applicable), and what additional purposes the personal information will be used for and by whom.
Stack as Data Controller and Processor
Stack is a global company with its headquarters in the United States (US). Accordingly, it should be appreciated that certain personal information may be accessed, used, processed, and/or transferred to the US and other countries or territories, as indicated on the Stack Overflow for Teams sub-processor list.
In providing the Integrations, we may process data in two ways: as a data processor, acting on behalf of an organization, or as a data controller, acting for our own purposes. This Privacy Notice covers our obligations as a data processor, processing personal data on behalf of an organization, but we also explain when we act as a data controller.
In its use of any Integration, the customer acts as a business and is considered to be the data controller/exporter in respect of personal information that is provided to Stack by the customer and its authorized users. During this engagement, Stack acts as a service provider and is considered to be the data processor/importer in respect of such personal information that is held or processed as a result of the provision of the Integrations.
When users interact with an Integration, we may also collect and process certain information for our own purposes as a data controller. This includes personal information, such as login credentials and contact details.
What Information Do We Collect
The below tables indicate information collected and or generated in the course of providing each of the Integrations. It should be appreciated that certain information is required to be collected in order to provide the Integrations, some of which may be considered personally identifiable (e.g., User IDs, usernames, display names, etc.). Other information, such as event data and other aggregated data which at no time reveals any private, protected, or personal information contained within your instance, may be collected or generated (e.g., for Integration health and/or reporting purposes).
Microsoft Teams Integration
|Authentication information||When you give Microsoft Teams permission to integrate with Stack Overflow for Teams, we will collect and use certain identifiers, including your Tenant ID, User ID, and the URL of your Microsoft Teams instance.|
|Authentication information||Authentication details and credentials for the Slack app, including the base URL for your Slack instance, an identifying key, and an access token.|
|Workspace information||Slack workspace data including channel IDs and Slack usernames.|
|Authentication information||Authentication details and credentials for the Jira app, including the base URL for your Jira instance, an identifying key, a client key token, and a shared secret token.|
|Contributor information||The Jira display name of any contributor to a Jira ticket or comment.|
|Project information||Certain project information about Jira tickets linked to inside Stack Overflow for Teams, including project key, number, title, description, reporter, assignee, comments, and other metadata.|
What We Use Personal Information For
We will use certain personal information for the following purposes:
- Contacting you (e.g., as required under the applicable agreement terms for any reason, notice of an updated policy or terms, in response to a support ticket, etc.).
- Note that this includes marketing emails from us, but only where we have received consent to provide such emails.
- Providing you with reporting and metrics relative to your engagement with an Integration.
- Compliance with a legal, contractual, or regulatory obligation.
We may additionally use certain personal information where it is in our legitimate interests, including our commercial interests or a third party’s legitimate interest in using the personal information. Examples include, but are not limited to, when we carry out analysis to understand how the Integrations are used and how we can improve them.
Whenever we rely on legitimate interests for processing, we ensure that we consider and balance our interests against the individual’s interests before processing. We do not process personal information on the basis of legitimate interest for activities where an individuals’ interests override Stack’s interests.
Who Do We Share Personal Information With?
When providing the Integrations, we may employ third party companies and individuals (a.k.a., third-party service providers, sub-processors, etc.) to facilitate certain features and functions of the Integrations, such as to host, provide support services, or to assist us in analyzing how an Integration is being used (e.g., to improve the quality of our services, to provide reporting, etc.). For more information on this and other data privacy concerns, please refer to the Stack Overflow for Teams Privacy Notice.