Privacy Policy

Last updated: September 2026

This privacy statement follows the structure required of Dutch businesses under GDPR guidance published by the Dutch government's business portal (business.gov.nl), and sets out your rights under the EU General Data Protection Regulation (GDPR).

1. Who we are

We are based in Amsterdam. You can find our registration details below:

Oaken Labs has not appointed a formal Data Protection Officer. Direct any privacy question to the email address above.

2. What data we process, and why

2.1 Through the ProGantt app (Jira)

ProGantt is an Atlassian Forge app installed inside a customer's own Jira site. It processes:

• Jira account identifiers (Atlassian account ID) — to identify who is opening or editing a chart, and to apply per-chart access rights the customer's admin configures.
• Jira work data (issue keys, summaries, dates, status) — read from and, where the customer links tasks to Jira tickets, written back to Jira issues the user already has access to.
• Group membership — looked up via Jira's API only when a chart's access rights reference a Jira group, to check whether the requesting user belongs to it.
• Gantt chart content the customer creates (task names, dates, notes) — stored using Atlassian Forge's own app storage, scoped to the customer's Jira site.

Purpose: to provide the Gantt-charting functionality the customer's organisation has installed ProGantt for. Legal basis: performance of the contract between Oaken Labs and the Jira site's organisation (via the Atlassian Marketplace terms), and Oaken Labs' legitimate interest in operating the app reliably.

2.2 Through this website (oakenlabs.app)

• Contact form submissions — name, email address, and message content, when you choose to send us one.
• Aggregated, cookieless website analytics — page-level visit counts that do not use cookies and do not identify individual visitors.

Purpose: to respond to enquiries, and to understand aggregate site usage. Legal basis: legitimate interest (responding to messages you send us; keeping the site working) and, for the contact form, performance of pre-contractual steps you initiate.

3. Who has access to your data

Data is processed by Oaken Labs and by the infrastructure providers necessary to run our services:

• Atlassian — Jira account data and app storage are processed on Atlassian's Forge platform, as part of running ProGantt inside Jira.

We do not sell personal data, and do not share it with third parties beyond what's needed to operate the services above.

4. How long we keep data

• Chart data and Jira account identifiers processed by ProGantt are kept for as long as the app remains installed on the customer's Jira site, and are removed on uninstall in line with Atlassian's Forge data-retention rules.
• Contact form messages are kept only as long as needed to handle your enquiry, and are deleted once resolved unless we're legally required to keep them longer.
• Aggregated analytics data is not tied to individuals and is kept only in aggregate form.

5. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

6. Cookies

This website does not use tracking or advertising cookies. Our analytics are cookieless by design and do not collect personal data, so no cookie-consent banner is required.

7. Your rights under the GDPR

You have the right to:

• Access the personal data we hold about you;
• Have inaccurate data corrected;
• Have your data erased, where applicable;
• Restrict or object to our processing of your data;
• Receive your data in a portable format;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with a supervisory authority — in the Netherlands, the Autoriteit Persoonsgegevens.

To exercise any of these rights, email info@oakenlabs.app.

8. International transfers

Atlassian and Hostinger may process data outside the country where you're located, including outside the EEA. Where this happens, it relies on the safeguards those providers publish (such as the EU Standard Contractual Clauses) as part of their own compliance programmes.

9. Changes to this policy

We may update this policy as our services or legal obligations change. The date at the top of this page shows when it was last revised.