This policy was last updated May 26, 2023
1.2 This policy applies to the following groups of individuals:
2.1 How we obtain your personal data
You may provide us with your personal data as a result of entering into a subscription for one of our services or signing up to receive information on our website. We also obtain personal data from third parties such as sellers of marketing lists or our suppliers, which we refer to as “third party sources” or “suppliers” throughout this policy. Jama also has a referral scheme whereby another individual may give us your personal data because they believe you would be interested in our services.
2.2 What personal data we collect about you
We collect and use the following personal data:
If you are an online customer or website user, we will also collect the following about you:
2.3 How we use your personal data
2.4 How and why we share your personal data with others
Jama relies on the Standard Contractual Clauses adopted by the European Commission as a means of ensuring sufficient safeguards on data protection for the transfer of data from the European Union (“EU”), the European Economic Area (“EEA”), Switzerland and the United Kingdom to the United States. Jama incorporates the SCCs into its contracts when the transferring of such data is applicable. The SCCs can be found on the European Commission’s website at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
4.1 Jama respects your control over your information and, upon request Jama will provide you with information about whether we hold any of your personal data. If your personal data changes, or if you no longer desire our service, you may correct, update, amend, delete/remove, ask to have it removed from a public forum, directory or testimonial on our site or deactivate it by making the change on our member information page or by emailing our Customer Care at [email protected] or by contacting us by telephone or postal mail at the contact information listed below. We will respond to your request within 30 days.
4.2 Jama sends out various marketing material including announcements about product updates, services, or the company newsletter. You may opt-out at any time and choose to stop receiving periodic email by following the unsubscribe instructions included in these emails, accessing the email preferences in your account setting page or you can contact us at [email protected]
5.1 If you are an EU citizen, you have certain additional rights to object to our use of your personal data. In this context personal data means any data that we hold about you which identifies you as an individual, for example your name or email address, and information connected to this would be personal data.
5.2 Information on the rights of EU citizens is set out below. If you would like further information in relation to these or would like to exercise any of them, please contact us via email at [email protected] at any time.
5.3 We will consider all such requests to exercise the rights listed below and provide our response within a reasonable period (and in any event within one month of your request unless we tell you we are entitled to a longer period allowed by applicable law). Please note, however, that certain personal data may be exempt from such requests in certain circumstances, for example if we need to keep using the information to comply with our own legal obligations or to establish, exercise or defend legal claims.
5.4 If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.
5.5 Right of access
You have a right to access to any personal data we hold about you. You can ask us for any of the following:
5.6 Right to update your personal data
You have a right to request an update to any of your personal data which is out of date or incorrect. We may need to verify the accuracy of the new information you provide us.
5.7 Right to ask us to delete your personal data
You have a right to ask us to delete any personal data which we are holding about you in certain specific circumstances. If you would like further information on these specific circumstances, please contact us.
If we receive a request from you we will also pass your request onto other recipients of your personal data unless that is impossible or involves disproportionate effort. We will also tell you who the recipients of your personal data are if you would like us to.
5.8 Right to restrict use of your information
You have a right to ask us to restrict the way that we process your personal data in certain specific circumstances. If you would like further information on these specific circumstances, please contact us.
If we receive a request from you, we will also pass your request onto other recipients of your personal data unless that is impossible or involves disproportionate effort. We will also tell you who the recipients of your personal data are if you would like us to.
5.9 Right to stop receiving marketing materials
You have the right to ask us to stop using your personal data for direct-marketing purposes. If you exercise this right, we will stop using your personal data for this purpose.
5.10 Right to data portability
You have the right to ask us to provide your personal data to a third-party provider of services.
This right only applies where we use your personal data on the basis of your consent or performance of a contract; and where our use of your information is carried out by automated means.
5.11 Right to object.
You have the right to ask us to consider any valid objections which you have to our use of your personal data where we process your personal data on the basis of our or another person’s legitimate interest.
6.1 If you are a California resident, you have certain additional rights under the California Consumer Privacy Act (“CCPA”). This section explains your rights regarding your personal information and how we handle your personal information. Personal information, as defined by the CCPA, does not include publicly available information from government records and de-identified or aggregated consumer information. We will not share any personal information about you to the extent prohibited by applicable California law or to the extent your prior consent to share is required by applicable California law unless we have obtained such consent.
6.2 You may have the following rights under the CCPA:
The right to request access to your personal information. You have the right to request access to your personal information and obtain from us information regarding the disclosure of your personal information that has been collected by us in the prior 12-month period.
The right to data portability of your personal information: You have a right to request to receive your personal information, when provided electronically, in a readily-useable format.
The right to know about your personal information. You have a right to be notified about our collection and use of your personal information. You have the right to request and obtain information regarding the following:
The right to opt-out of sales of your personal information. We do not sell your personal information.
The right to delete your personal information. You have the right to request the deletion of your personal information that we have collected from you, subject to certain conditions and limitations under the law.
The right to be free from discrimination. You have the right not to be discriminated against for exercising any of your rights under the CCPA, including by:
We will not discriminate against you for exercising your CCPA rights.
6.3 Collection and Use of Personal Information. The personal information we collect about you and how we use it is detailed in Section 2 above. For purposes of the CCPA, the categories of personal information we may collect include:
As detailed in Section 2.1 above, we may collect personal information about you from the following categories of sources:
We may use and disclose the categories of personal information we collect from and about you consistent with the business purposes detailed in Section 2.3 above. Please refer to Section 2.4 above for the categories of third parties with whom we share your personal information.
6.4 Making Requests. In order to exercise any of your rights as a California resident under the CCPA, please contact us via email at [email protected], or by mail at Jama Software, 135 SW Taylor St., Suite 200, Portland, OR 97204, or by calling us at or calling us at 877-703-0763. When submitting a request, please include your name, email address, account information, and purpose of the request. In compliance with CCPA, we will require certain identifying information from you to verify your request. You may designate an authorized agent to request the exercise of any of these rights on your behalf if you provide us with written authorization or a power of attorney signed by you. If you are using an authorized agent, such requests are subject to the same verification criteria.
Requests for personal information are limited to two requests in any 12-month period. We will respond to verified requests with the required information within 45 days of receiving your verified request. If we need additional time to respond, we will let you know in advance. There may be circumstances where certain information is exempt from requests under applicable law, and we may be required to continue to retain or share portions of your personal information to comply with regulatory or legal obligations.
7.1 If you are a PRC citizen, you have certain additional rights to your personal information under the PRC Personal Information Protection Law (the “PIPL”). Personal information, as defined by PIPL, means a variety of information related to an identified or identifiable natural person recorded electronically or by other means, excluding any anonymised information. Sensitive personal information means the personal information that, once leaked or illegally used, would easily lead to the infringement of a natural person’s human dignity, or would endanger his or her personal or property security, including, without limitation, information on bio-identification, religious beliefs, specific identity, medical and health care, financial accounts, location tracking, as well as the personal information on minors under the age of 14.
7.2 We may use your personal information consistent with the purposes detailed in Section 2.3 above or as otherwise permissible by PRC law. When we share your personal information as per Section 2.4 above, we shall share it with third parties in compliance with applicable PRC law.
7.3 Your rights under PIPL as set out as below. If you would like to further information in relation to these rights or would like to exercise any of them, please contact us via e-mail at [email protected] at any time.
Right to access: You have the right to access your personal information that we have collected;
Right to correct: you have the right to correct your personal information we have collected if any personal information is incorrect, inaccurate or incomplete;
Right to copy: you have the right to obtain a copy of your personal information that we have collected;
Right to portability: you have the right to request that your personal information collected by us be transferred to another organization designated by you, subject to the conditions set forth by competent PRC authorities;
Right to refuse and restrict: you have the right to refuse or restrict certain types of processing activities or the processing of certain types of your personal information collected by us;
Right to delete: you have the right to request deletion of your personal information collected by us if:
If we decide to respond to your request for deletion, we will also, to the extent practicably possible, notify the entities which have obtained your personal information from us, and request that they delete it promptly, unless otherwise provided for by applicable laws or regulations, or such other entities have obtained from you a separate consent.
For avoidance of doubt, even if you make a request for deletion, such request may be denied if: (i) we have other legal grounds for processing personal information; (ii) the legal retention period has not yet expired; (iii) it is technically impossible or difficult to achieve the deletion (in which case we will cease processing activities other than storing and taking necessary safeguard measures).
Right to withdraw: You have the right to withdraw any consent you have granted to us in respect of the processing of your personal information. Please be aware that certain business functions can only be completed with certain basic personal information, and when you withdraw your consent or authorization, we will not be able to continue to provide you with the services for which you have withdrawn your consent or authorization, and will no longer process your corresponding personal information. However, your decision to withdraw your consent or authorization will not affect the processing of the personal information that was previously carried out based on your authorization;
For avoidance of any doubt, even if you withdraw your consent, we may also process your personal information if we have other legal grounds to do so (for example, to the extent necessary to perform the contract between you and us).
Right to explanation: You have the right to request an explanation of our policies regarding the processing of your personal information at [email protected] We will respond to your request within 30 days.
In principle, we will not charge you for a reasonable request. However, we are entitled to charge directly related and necessary fees for repeated requests beyond reasonable limits in accordance with applicable laws and regulations. We may reject requests that are unwarrantedly repetitive, that require ultra-standard technical means to achieve, that pose a risk to the legal rights of others, or that are highly impractical.
7.4 As Jama is located in the United States and provides services globally, your personal information may be transferred out of PRC and stored and processed in the United States subject to the applicable PRC laws and regulations. Where your personal information is stored and processed out of China, we shall ensure that your personal information be protected at such level no lower than offered under the applicable Chinese laws and regulations.
7.5 We use trusted protection mechanisms based on NIST guidelines to prevent malicious attacks on personal information. We deploy access control mechanisms and make reasonable efforts to ensure that only authorized personnel can have access to personal information. We also require all persons who may have access to your personal information to comply with the applicable confidentiality obligations.
7.6 In order to address potential risks arising from the leakage, destruction, and loss of personal information, we have established a proper system to regulate the process for managing data breach incidents. If a data breach incident occurs involving your personal information and if so required by applicable PRC law, we will also advise you of the general information of such incident and possible impact by such incident, remedial measures we will take or have taken, and suggestions you may consider in preventing or reducing the risks by yourself and so other information as necessary, in accordance with the requirements of applicable laws and regulations. Where required by PRC law, we will also report the same to the competent regulatory body in the PRC.
Unless you send an opt-out notice to [email protected], the Purpose of Use includes providing your information to Jama’s third party service providers of Jama as detailed herein. Jama is located in the United States, and the storage and processing of your information will take place in the United States.
9.1 Jama collects information under the direction of its clients, and in these instances, Jama has no direct relationship with the individuals whose personal data it processes. If you are a customer of one of our clients and would no longer like to be contacted by one of our clients that use our service, please contact the client that you interact with directly.
9.2 If you wish to access, correct, amend, or delete personal data which we hold on the direction of a client you should contact that client (the data controller) directly. If the client requests Jama to remove, amend or correct your personal data, we will respond to their request within 30 days of receiving it from the client.
9.3 We will retain personal data we process on behalf of our clients for as long as we are instructed to by the relevant client.
10.3 Our website does not respond to “Do Not Track” (“DNT”) signals.
11.1 As is true of most web sites, we gather certain information automatically and store it in log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data.
11.2 We may combine this automatically collected log information with other information we collect about you. We do this to provide support for the services we offer.
We partner with a third party to either display advertising on our website or to manage our advertising on other sites. Our third-party partner may use technologies such as cookies to gather information about your activities on this website and other sites in order to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here (or if located in the European Union click here). Please note this does not opt you out of being served ads. You will continue to receive generic ads.
13.1 The security of your personal data is important to us. When you enter your login information to our platform, we encrypt the transmission of that information using transport layer security (TLS).
13.2 We follow generally accepted standards to protect the personal data submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. If you have any questions about security on our Web site, you can contact us at [email protected]
Our Web site offers publicly accessible blogs. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. To request removal of your personal data from our blog, contact us at [email protected] In some cases, we may not be able to remove your personal data, in which case we will let you know if we are unable to do so and why.
We display personal testimonials of satisfied customers on our site in addition to other endorsements. With your consent we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at [email protected]
Our website is not directed to nor are our services offered to minors. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected personal information from anyone under the age of 18, we will take steps to delete and destroy this information as soon as reasonably possible.
Our product team is committed and dedicated to providing the absolute best Jama experience. To support this initiative, we might access your anonymized usage data. Analysis of this data will inform our data-driven product development. Please see the Usage Data FAQ for more information.
135 SW Taylor Suite 200
Portland, OR 97204
Phone Number: (877) 703-0763
Contact the Jama Support Team