Data Processing Addendum

This addendum is part of the Terms of Service between the customer ("you", the controller) and Yalla Scrum, 1st settlement South Academy ("we", the processor). It applies to the personal data we process for you through Yalla Scrum.

1. Scope

• Subject matter: providing Yalla Scrum, a sprint planning and team capacity tool for Jira Cloud.
• Duration: while your subscription or trial lasts, and until the data is erased as set out below.
• Data subjects: your users, and the people in your Jira data (assignees, reporters and other team members).
• Personal data: names, email addresses, Atlassian account IDs and avatars, roles, sign-in records, and personal data inside the Jira issues and plans your team works with.

2. Our duties

• We process the data only on your documented instructions, which are these terms and how you use Yalla Scrum.
• Everyone at our side who can access the data is bound to keep it confidential.
• We keep the data secure, including encryption of access tokens at rest and limited access.
• We help you answer data subject requests and meet your other legal duties, as far as Yalla Scrum allows.
• We tell you without undue delay after we become aware of a personal data breach that affects your data.

3. Sub-processors

You authorise these sub-processors:

• Atlassian: Jira sign-in (OAuth) and the Jira data Yalla Scrum reads and updates on your behalf.
• Resend: sending Yalla Scrum's emails.
• Paymob: card and wallet payments.
• Our hosting provider: the servers, database and backups that run Yalla Scrum.

We tell you before we add or replace a sub-processor, and you may object by contacting us. Each sub-processor is bound to protect the data at least as well as this addendum requires.

4. Retention and deletion

When you cancel, we keep your workspace data until the end of the last period you paid for, then erase it. Backups are kept for 14 days, so the data leaves our backups within 14 days after it is erased.

5. Audits

On request we give you the information you reasonably need to show that this addendum is met.

6. Contact

Data protection questions and requests: [email protected], or Yalla Scrum, 1st settlement South Academy.