JQL Dependency Chart (the app), once installed, fetches the strict data from Jira Server Cloud (via Java REST API) to work as described in the app documentation. The . All the traffic occurs between Jira Cloud and the user’s browser exclusively.
Some app configuration data are stored in the Jira database.No other Jira data are stored anywhere (except perhaps in some temporary cache for internal use). In all the cases, such caches would be stored in the customer's organization storage devices (hard disks, etc)users' browsers only. No personal data in any case.
None of those Jira data are shared with any third party organization, nor ourselveswith us either.
No personal data are collected.
No tracking data for customers' navigation analytics are collected (Ii.e: Google Analytics, etc).. Google Analytics).
The app logs are written in the Jira logs exclusively for Data Center. The Cloud version does not log any data.
Some configuration data are written in the user's browser local storage and others in Jira (i.e, gadgets).
It's the customer's sole responsibility to provide all the required mechanisms to keep the privacy and security of the data and access control to the app.In case of some security threat be detected, we will immediately scale it to Atlassian and

Security policy

The app does not require users’ login nor JWT tokens for authenticate the app: it runs in the Jira user’s security context honoring Jira permissions.
The app is subscribed to the Atlassian's Bug Bounty program for regular security threats checking.
If a security thread is detected we will follow the protocol and recommendations provided by Atlassian in addition to the actions that we consider opportune.

...

Support data

Customers might want to share additional information with us in order to get support (use cases, bug fixes, etc,). It is the customer's responsibility to sanitize all the information (URL, sensitive data in logs, screenshots, etc) before sharing it with us.
All those information is saved in an Jira Cloud instance provided by Atlassian and only our employees can read them.
We might share all those information with Atlassian under our sole discretion if we consider that it might help to provide better support to the client. It shall not be shared with any other third-party unless explicit written customer's authorization.We support an option in our public Jira instance to keep all those information private, therefore only the reporter and us could read it. The customer must set this option (or check whether is already pre-selected) if they want to keep all their data private.

The customer accepts all the terms described in this policy by installing the app.

May, 24th 2019

Feb, 15th 2023

...

VAT B87829354

Factoria

Estacion Chamartin s/n,

28036 Madrid (Spain)