Privacy Policy

Last updated: October 2026

This policy explains what Xen Engineering collects when you use XenJira and how it is used.

What we store

• Account: name, email, a salted password hash, licence key, trial and paid dates.
• Payments: amount, date and the payment provider's reference. Card details are handled by the payment provider and never reach us.
• Usage: per run, the model used, token counts and cost (no code or ticket text).
• Security: a one-way hash of your VS Code machine ID (to enforce one free trial per computer), IP addresses in security logs.

What we do not store

Your Jira API token, your AI provider API key, your source code and your ticket content are sent to our server only for the duration of a run, used to call Jira and your AI provider on your behalf, and are not saved. Files that look like secrets (.env, keys, credentials) are never sent.

Who processes data

• Your AI provider (chosen and contracted by you) receives the ticket and relevant code for each run.
• Our payment providers (e.g. Lemon Squeezy, Stripe) process purchases under their own privacy policies.
• Our hosting provider stores the database in encrypted backups on our server.

Emails

We send service emails only: password resets, payment confirmations and renewal reminders.

Retention and your rights

We keep account and payment records while your account exists and as required for accounting. You can ask for a copy, correction or deletion of your data at any time by emailing support@xenengineering.com.

Contact

Xen Engineering