Legal
Privacy policy
Last updated: 25 June 2026
This Privacy Policy explains how OST Consulting SRL (“OST Labs”, “we”, “us”) collects and uses personal data for which we are the data controller, and the rights you have under the EU General Data Protection Regulation (GDPR) and Belgian data protection law. It applies to our websites and to our dealings with prospects, customers and people who contact us.
How we act: controller and processor
When you use our apps and we process personal data contained in your Atlassian or monday.com environment, your organisation is the controller and we act as a processor on its behalf. That processing is governed by our Data Processing Agreement (DPA), not by this policy, and end-user requests about that data should be directed to your organisation.
This Privacy Policy covers the personal data for which OST Labs is itself the controller: information from visitors to our websites, from people who contact us or request support, and from prospects and business contacts.
Who we are
The controller is OST Consulting SRL (trading as OST Labs), a company established in Belgium, registered office Chemin de la Truite 9, 1180 Uccle, Belgium, enterprise / VAT number BE 0741 577 074. We have not appointed a Data Protection Officer, as we are not required to. For any privacy matter you can reach us at info@ost-consulting.be.
The personal data we collect
- Website usage and technical data. When you visit our sites we process limited technical data such as your IP address, device and browser information, and pages viewed, through strictly necessary cookies and server logs. We do not run analytics or advertising cookies today (see Cookies below).
- Contact and support data. If you contact us or open a support request, we process your name, email address, company, and the content of your message. Support is handled through the Atlassian support portal and our business email.
- Prospect and business-contact data. Contact details and company information of people we deal with commercially.
- Marketplace and billing data. Purchases, billing and licensing are handled by Atlassian and monday.com; we receive only limited related information (such as a contact and the apps in use) from them.
We collect this data directly from you, from your use of our websites, and from the Atlassian Marketplace and monday.com Apps Marketplace.
How we use your data, and our legal bases
- To run, secure and maintain our websites and prevent abuse, on the basis of our legitimate interests in operating a secure, reliable service.
- To respond to your enquiries and provide support, on the basis of taking steps at your request and performing our contract with you or your organisation, or our legitimate interests in helping users.
- To comply with our legal obligations, such as accounting and responding to lawful requests from authorities, on the basis of a legal obligation.
- For analytics or marketing cookies, only on the basis of your consent, which you can withdraw at any time. We do not currently send marketing email.
Cookie use differs across our websites. The cookies listed above are those set on ost-labs.com, which uses only strictly necessary cookies. Our app marketing sites use analytics and, where applicable, advertising cookies with your consent; the cookies each one sets are listed in its own cookie policy: jira-templates.com and easyclone.io.
Who we share your data with
We keep our use of third parties deliberately minimal. We share personal data only with service providers who process it on our behalf under contract, and with Atlassian and monday.com as the marketplaces through which our apps are sold. We do not sell your personal data.
The third parties that process data on our behalf are published in our single, canonical subprocessor list (currently DigitalOcean, Cloudflare and Atlassian), which we keep up to date rather than restating here. We may also disclose data where required by law.
International transfers
Our hosting and processing are based in the European Union (DigitalOcean, Frankfurt; Atlassian under its EU data residency). Where a provider operates a global service that may process data outside the European Economic Area, such as our edge-network and security provider, those transfers are protected by appropriate safeguards, in particular the EU Standard Contractual Clauses and the provider’s data processing terms.
How long we keep your data
We keep personal data only as long as necessary for the purpose for which it was collected. Support and enquiry correspondence is kept while we handle your request and for a reasonable period afterwards; records we must retain by law (such as accounting records) are kept for the legally required period. Personal data we process as a processor on your organisation’s behalf is retained and deleted in line with our DPA.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected (rectification);
- have your data erased, where applicable;
- restrict or object to our processing;
- data portability; and
- withdraw consent at any time, where we rely on consent.
To exercise any of these, contact us at info@ost-consulting.be. We will respond within one month. Where we act as a processor for your organisation, please direct the request to that organisation (the controller).
Complaints
If you have a concern you can lodge a complaint with your local supervisory authority. In Belgium this is the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels. We would, of course, appreciate the chance to address your concern first.
Security
We protect personal data with appropriate technical and organisational measures, including encryption in transit and at rest, access controls and monitoring. Our security posture is described in our Security Whitepaper and on our Trust Center.
Automated decision-making
We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects.
Changes to this policy
We may update this Privacy Policy from time to time. The date at the top shows when it was last revised, and we will flag material changes where appropriate.
Contact us
OST Consulting SRL (OST Labs), VAT BE 0741 577 074. Email info@ost-consulting.be. Our registered office is given under “Who we are” above.