Legal
Privacy Policy
Last updated: June 23, 2026
Workvane is a browser extension that surfaces Jira Cloud state and workflow actions inside GitHub pull requests. This policy explains what data the extension handles, what stays on your device, what is stored in the cloud, and the third parties involved. We collect as little as possible.
1. Data stored only on your device
The following is kept in your browser's local extension storage
(chrome.storage) and is never transmitted to Workvane's
servers:
- Jira connection settings — your Jira domain, email, and API token. These are used by the extension to call your Jira Cloud directly from your browser.
- Extension configuration — project keys, repository allowlist, status colors, and transition button definitions.
- PR ↔ ticket associations — local mappings between pull requests and Jira issues you've linked.
- A cached subscription token — a short-lived signed grant used to unlock Pro features offline.
Clearing the extension's storage or removing the extension deletes all of this.
2. Data stored in the cloud
To sign you in and manage subscriptions, we store a small amount of account data on our backend (hosted on Supabase):
- Account identity — your user ID and email address from the GitHub account you sign in with.
- Subscription status — whether you have an active Pro subscription, the plan, and renewal/expiry dates, received from our payment processor.
We do not store your Jira credentials, your code, your pull request contents, or your Jira ticket contents on our servers.
3. Third-party services
The extension communicates directly with these services on your behalf:
| Service | Purpose | Data involved |
|---|---|---|
| GitHub | Sign-in (OAuth) and reading pull-request state (mergeable status, review threads) | Your GitHub identity and PR metadata for repositories you view |
| Atlassian / Jira Cloud | Reading ticket state and performing workflow transitions you trigger | Requests authenticated with your own Jira API token, sent from your browser |
| Supabase | Authentication and storing account + subscription status | Your account ID, email, and entitlement record |
| Lemon Squeezy | Payment processing for Pro subscriptions | Your billing details are handled entirely by Lemon Squeezy; Workvane never sees your card data |
Each service has its own privacy policy governing the data it processes. Payments and card data are handled by Lemon Squeezy as the merchant of record.
4. Browser permissions
The extension requests only the permissions it needs to function:
- Storage — to save your settings and connection details on your device.
- Tabs — to detect when a checkout completes and to open the settings/dashboard page.
- Identity — to run the GitHub sign-in flow.
- Access to github.com — to display Jira chips and actions on pull-request pages and read PR state.
- Optional access to your Atlassian site — requested only when you connect Jira, to read ticket data and apply transitions.
5. What we don't do
- We don't sell or rent your personal data.
- We don't use advertising or cross-site tracking in the extension.
- We don't read pages other than GitHub pull-request pages.
- We don't collect your browsing history.
6. Data retention and deletion
On-device data exists only until you clear it or uninstall the extension. Cloud account data is retained while your account is active. To delete your account and associated cloud data, email us at the address below and we'll remove it.
7. Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected by updating the "Last updated" date above.
8. Contact
Questions, data requests, or deletion requests: email us.