Privacy Policy for SamAuditor

Effective Date: Jun 2025

1. Introduction

Samauditor is a software asset management tool available through the Atlassian Marketplace. We respect your privacy and are committed to safeguarding the data you submit via our software. This Privacy Policy describes what data we collect, how it is used, and how we protect it.

2. What Data We Collect

Our agent and web interface may collect the following data from your organization's PCs:

System Information: Hostname, operating system name and version, last boot time, and last logged-in user (used for licensing analysis).
Installed Software: Software vendor, name, version, installed date (similar to what is displayed in the Windows Apps list).
Optional Licensing Information: Vendor, license name, license type (device/user), quantity, purchase price, annual cost, expiry date, and which products consume the license.
Optional Rules: You may define custom rules to identify unique software.

3. How Data is Collected

Data is collected via a downloadable agent that uploads its installed software and limited system information (see above). This data is securely transmitted to our servers via an API.

4. Why We Collect Your Data

The data collected enables the core functionality of Samauditor. It allows your organization to:

Track and understand software installations
Ensure license compliance
Identify opportunities for cost savings
Budget future software expenses

5. Where and How Data is Stored

Data is stored in private databases located in the USA, Germany, and Singapore. These are isolated, secure environments maintained by us and not accessible to the public or any third party.

6. Data Sharing

We do not share your data with any third parties. No analytics providers, advertisers, or external partners are given access to your data.

7. User Control and Access

You may request deletion of your data at any time via our support portal.
Data is automatically deleted 30 days after your Atlassian subscription ends.
Many of the report pages offer data export functionality, allowing you to download what you see.

8. Data Retention

We retain your data for up to 30 days after account termination or inactivity to allow for reactivation. You can request immediate deletion by submitting a support ticket. We will endeavour to delete your data within 7 days of request.

9. Security Measures

We take the security of your data seriously. Our measures include:

All data is linked to your Atlassian ID and authenticated via signed JWT tokens issued by Atlassian.
Our databases are not publicly accessible and protected behind multiple proxy layers and Cloudflare's security infrastructure.
Access to backend services is strictly controlled via firewall rules and limited personnel.
Regular security updates and patching are applied to all servers.

10. Lawful Basis for Processing

We process your data under the lawful basis of legitimate interest and contractual necessity, as the data is required to deliver the services offered by Samauditor. We do not process personal data in the form of identifiable user profiles or sensitive personal information.

11. Children’s Privacy

Samauditor is intended for enterprise use and not designed for use by individuals under the age of 16. We do not knowingly collect or store personal data relating to children.

12. Cookies

Our website uses cookies for technical reasons and to enhance performance. These are not used for tracking, advertising, or analytics by third parties.

13. Your Rights

If you are subject to the UK GDPR or similar privacy regulations, you may have rights to:

Request access to your data
Request deletion of your data
Raise concerns with a supervisory authority

14. Contact

If you have any questions or requests regarding this privacy policy or your data, please contact us at:
[email protected]

15. Governing Law

This Privacy Policy is governed by the laws of England and Wales.