Information Gathering and Usage
During Add-on installation, users grant access to the app to read repositories.
The access is needed to collect commit metadata required to promptly build and render graphs when loading pages.
We collect the following commit details: repository UUID, commit hash, author username, parent hashes, commit date. No cloning operations are executed, the data is collected using internal API.
As a result of Bitbucket APIs, Bitbucket Karma can only get Read and Write access to private repositories, even though Bitbucket Karma only uses the Read permissions.
Our staff has no way to see any of your JIRA, Bitbucket, or Git data, and no way to communicate with our app installation. Our application never "phone home".
The information we collect is used to improve the quality of our service, and is not shared with or sold to other organizations for commercial purposes.