Privacy Policy

1. Scope

This Privacy Policy explains how Lukany LLC (“Lukany”, “we”, “our”, or “us”) handles personal information in connection with lukany.co (the “Site”), our consulting services, and our apps for Atlassian products, including Standup Arcade for Jira (the “App”). It applies to visitors of the Site, to individuals who contact us or engage us for services, and to people whose information the App processes.

2. Information We Collect

Information you provide. When you reach out through the Site's contact form, by email, or during an engagement, you may provide your name, email address, company name, phone number (if you choose to share it), and any content you include in your message or the materials you share with us.

Information collected automatically. The Site is a static marketing website hosted on Cloudflare. Our hosting provider may automatically log basic technical information such as IP address, user-agent string, request timestamp, and requested URL for the purposes of delivering the Site, preventing abuse, and maintaining security. We do not set our own cookies and we do not run first- or third-party analytics, advertising, or behavioral-tracking scripts on the Site.

3. The App: Standup Arcade for Jira

Where it runs. The App is built on Atlassian Forge and runs entirely inside your organisation's Atlassian site, on Atlassian's infrastructure. Lukany operates no servers for the App and has no access to the data it stores. The App makes no outbound network requests.

What it stores. In your site's own Forge storage, per board: the App's settings; the Atlassian account IDs of people a team has left out of its speaking rotation; and, for each finished standup, the Atlassian account IDs of the participants together with their speaking order, whether each spoke or was skipped, and how long each turn lasted. It does not store names, email addresses, avatars, time zones or issue content: names and avatars are read from Jira each time they are shown.

What it reads. The App reads Jira as the person using it, with that person's own permissions, and shows only what they may already see. Jira may ask a person once to allow the App to act on their behalf. Of the assignee details Jira returns, the App passes only the account ID, account type, display name and one avatar URL to the browser, and strips the rest.

Avatars. Avatar images are loaded by the browser from the hosts Atlassian allows by default (Gravatar and Atlassian's avatar service). A scene that paints a Gravatar-backed avatar onto a 3D object fetches it from Gravatar's image CDN (i0.wp.com); photos uploaded to Atlassian are never routed there.

Retention and erasure. Data stays for as long as the App is installed; uninstalling it removes the data under Atlassian's Forge storage retention policy. Once a week the App reports the account IDs it holds to Atlassian's User Privacy API and erases, from every stored standup and rotation, any person whose Atlassian account has been closed. A person whose account remains open may ask us to erase their data at privacy@lukany.co; your organisation's Jira administrator can also uninstall the App.

Roles. For the personal data the App processes, your organisation is the data controller and Lukany acts as a processor, with Atlassian as the sub-processor that hosts the data. No other third party receives it.

Logs. The App's backend logs contain counts, never an account ID.

4. How We Use Information

We use personal information to:

• respond to your inquiry and communicate with you about potential or active engagements;
• deliver, administer, and invoice for contracted services;
• comply with legal obligations and enforce our agreements;
• operate, secure, and improve the Site.

5. How We Share Information

We do not sell personal information. We share it only in limited circumstances:

• Service providers that help us operate the Site and our business — for example, our web host (Cloudflare), our email provider, and accounting or invoicing services. These providers may process information only on our behalf and in accordance with our instructions.
• Legal requirements — where disclosure is required by law, subpoena, or similar legal process, or where we believe disclosure is necessary to protect our rights or the safety of others.
• Business transactions — in connection with a merger, acquisition, financing, or sale of assets, with appropriate confidentiality protections.
• With your consent or at your direction.

6. Contact Form and Email

The contact form on the Site opens your device's default email client and sends the message directly from you to us. The contents of the message do not pass through the Site's servers. Email you send to addresses on the lukany.co domain is received and stored by our email provider.

7. Retention

We retain personal information for as long as is reasonably necessary for the purposes described in this policy, including to provide our services, maintain business records, resolve disputes, comply with legal obligations, and enforce our agreements.

8. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to object to or restrict certain processing, and to appeal decisions about your requests. To exercise these rights, contact us at privacy@lukany.co. We will verify your request and respond within the time required by applicable law.

California residents may have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to request deletion. We do not sell or share personal information for cross-context behavioral advertising.

10. International Users

We are based in the United States and process information there. If you access the Site from outside the United States, you understand that your information may be transferred to and processed in the United States, which may have data-protection laws that differ from those of your country.

11. Children

The Site and our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Sleepy Friends, our bedtime story app for young children, collects no data at all and has its own privacy policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above and, for material changes, provide additional notice where appropriate.

13. Contact

For privacy questions or to exercise your rights: