1. Introduction

This Privacy Policy explains how Wavumbuzi Dev Assist (“the Assistant”, “Custom GPT”, “we”, “us”) processes information when used via OpenAI’s ChatGPT platform in connection with the Wavumbuzi ecosystem (including Jira, Confluence, Bitbucket, Swagger, and related developer tools). 

This policy is specifically about the Wavumbuzi Dev Assist Custom GPT, not about the general Wavumbuzi platform (students, teachers, challenges, competition, etc.). For the broader Wavumbuzi privacy practices, please refer to the main Wavumbuzi Privacy Policy on our website. 

By using Wavumbuzi Dev Assist, you agree to the collection and use of information in accordance with this Privacy Policy. 

  1. Who we are

“Wavumbuzi Dev Assist” is an internal tool operated by Wavumbuzi (and its affiliated entities) to support development, documentation and operations of the Wavumbuzi platform. 

  • Controller / Operator: Wavumbuzi
  • Contact email: support@wavumbuzi.afric
  1. What Wavumbuzi Dev Assist does

Wavumbuzi Dev Assist is a developer and staff assistant that can: 

  • Explain backend and frontend code from Wavumbuzi repositories.
  • Retrieve and summarize technical documentation from Confluence.
  • Look up and summarize Jira issues and boards.
  • Explain and validate API endpoints using Swagger / OpenAPI.
  • Generate technical documentation (e.g., user flows, diagrams, drafts).

The Assistant is intended primarily for internal Wavumbuzi staff and contractors who already have access to these systems. 

  1. Information we collect and process

4.1. Information you provide in the chat 

When you use Wavumbuzi Dev Assist, we process: 

  • Messages you type into the chat.
  • Files, snippets or examples you paste or upload into the chat.
  • Prompts that may contain technical information, comments, and sometimes personal information if you choose to include it. 

You should avoid including unnecessary personal information (such as home addresses, national IDs, sensitive health information, etc.) in prompts. 

The content you share in ChatGPT is processed by OpenAI to generate responses and to provide and improve their services, in accordance with OpenAI’s own terms and policies. 

4.2. Data retrieved from integrated systems 

Depending on how Wavumbuzi Dev Assist is configured, it may retrieve information from: 

  • Jira (e.g., project names, issue keys, summaries, descriptions, comments, status, assignee names, and other metadata)
  • Confluence (e.g., page titles, content, comments, labels, spaces)
  • Bitbucket or other code repositories (e.g., file paths, source code content, commit messages, branch names)
  • API documentation / Swagger (e.g., endpoints, request/response schemas, example payloads)
  • Other connected developer tools as configured by Wavumbuzi  

These systems may contain personal data, such as names, email addresses, and comments added by your team members. Wavumbuzi Dev Assist only surfaces this information to users who already have appropriate access and only for the purpose of assisting development and operations. 

4.3. Technical and usage data 

Through OpenAI and our connected systems, we may also receive technical information such as: 

  • Date and time of interactions
  • Approximate location based on IP address (at a regional level)
  • Browser or client type (e.g., web, mobile, desktop)
  • Logs related to API requests, errors and performance

This data is used for security, debugging, access control and improving the internal tool. 

  1. How we use the information

We process information through Wavumbuzi Dev Assist for the following purposes: 

  1. To provide the Assistant’s functionality 
  • Generate answers to your questions
  • Retrieve, summarize and explain code, tickets and documentation
  • Help with debugging, technical documentation and workflow analysis
  1. To operate, secure and maintain our systems
  • Audit access to internal code and documentation
  • Monitor for abuse, misuse or unauthorized use
  • Improve reliability and performance of the tool
  1. To improve the Assistant and our developer experience
  • Understand what types of requests are common
  • Improve prompt templates and instructions
  • Enhance internal documentation and training material

We do not use Wavumbuzi Dev Assist to profile end users (students/teachers) or make automated decisions that produce legal or similarly significant effects about them. 

  1. Legal bases for processing

Where applicable data protection laws (such as the GDPR) apply, we rely on the following legal bases: 

  • Legitimate interests: to operate and improve our internal developer tools, secure our systems, and support the Wavumbuzi platform.
  • Contract: where processing is necessary for us to perform our obligations under agreements with our staff, contractors or partners.
  • Consent: where you explicitly choose to share certain optional information within the Assistant.
  1. How data is shared

7.1. With OpenAI 

Wavumbuzi Dev Assist is built on OpenAI’s ChatGPT platform. When you interact with the Assistant: 

  • Your prompts and relevant context are sent to OpenAI’s systems
  • OpenAI processes that data to generate responses and provide their services
  • OpenAI may log and store certain data in line with their own terms and privacy policy

OpenAI acts as an independent data controller or processor depending on your relationship with them. Please refer to OpenAI’s privacy policy and terms on the ChatGPT website for more information. 

7.2. With Atlassian and other service providers 

When the Assistant accesses Jira, Confluence or Bitbucket: 

  • Requests are sent to Atlassian cloud services using API tokens or OAuth
  • Data is retrieved only within the bounds of the configured permissions
  • Wavumbuzi may also use other providers for hosting, storage, logging, security and monitoring

All such providers are subject to contractual obligations regarding confidentiality and data protection. 

7.3. Within Wavumbuzi 

Access to Wavumbuzi Dev Assist is limited to authorized staff and contractors who need it for their work. Chat logs and retrieved data may be visible to: 

  • Engineering and DevOps teams
  • Product and technical leadership
  • Security and compliance teams, where necessary

We do not sell personal data. 

  1. Data retention

We retain information processed through Wavumbuzi Dev Assist for as long as necessary to: 

  • Provide the service and support internal development
  • Maintain security logs and audit trails
  • Comply with legal and regulatory requirements

Chat history and logs may be stored for a limited period consistent with our internal retention policies. Where feasible, data used for analytics and improvement is aggregated or anonymized. 

  1. International transfers

Because Wavumbuzi Dev Assist relies on cloud providers such as OpenAI and Atlassian, your data may be processed in multiple countries, including outside your country of residence. 

Where required by law, we take appropriate safeguards for international data transfers (for example, relying on standard contractual clauses or equivalent mechanisms provided by our service providers). 

  1. Your rights

Depending on your jurisdiction and role, you may have some or all of the following rights regarding your personal data: 

  • Access: to know whether we process your personal data and to obtain a copy.
  • Rectification: to request correction of inaccurate or incomplete data.
  • Erasure: to request deletion of your data where there is no longer a valid reason to keep it.
  • Restriction: to ask us to limit certain types of processing.
  • Objection: to object to processing based on legitimate interests.
  • Portability: to receive your data in a structured, commonly used format where applicable.

If you use Wavumbuzi Dev Assist as part of your work for an organization (e.g., a school, partner or employer), some requests may need to be directed to that organization as the primary controller of your account and content. 

To exercise your rights, please contact us using the details in the Contact section below. We may need to verify your identity before responding. 

  1. Security

We use reasonable technical and organizational measures to protect the information processed through Wavumbuzi Dev Assist, including: 

  • Access controls and authentication for internal systems
  • Role-based permissions and API tokens for Jira, Confluence, Bitbucket and other tools
  • Encryption in transit (HTTPS) and, where applicable, at rest
  • Logging and monitoring for suspicious activity

However, no system is completely secure. You are responsible for: 

  • Keeping your OpenAI/ChatGPT and related credentials secure
  • Not sharing sensitive passwords or secrets in chat prompts
  • Using the Assistant only from trusted and secure devices and networks
  1. Use by children

Wavumbuzi Dev Assist is an internal developer and staff tool and is not intended for students, children or general end users. It should only be used by authorized adults (staff and contractors) who have appropriate access to Wavumbuzi systems. 

  1. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect: 

  • Changes in how Wavumbuzi Dev Assist works
  • Updates to our integrations or service providers
  • Changes in applicable laws and regulations

When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify relevant users via internal channels. 

  1. Contact us

If you have questions about this Privacy Policy or how Wavumbuzi Dev Assist processes your data, please contact: 

  • Email: support@wavumbuzi.africa