Data privacy & security policy

Owned by Pablo Beltran
Last updated: Feb 23, 2023 by Mariia Romanova
2 min read

Data collected by the app

  • JQL Dependency Chart (the app), once installed, fetches data from Jira Cloud (via Java REST API) to work as described in the app documentation. All the traffic occurs between Jira Cloud and the user’s browser exclusively.

  • Some app configuration data are stored in the users' browsers only. No personal data in any case.

  • None of those Jira data are shared with any third party organization, nor with us either.

  • No personal data are collected.

  • No tracking data for customers' navigation analytics are collected (i.e. Google Analytics).

  • The app logs are written in the Jira logs exclusively for Data Center. The Cloud version does not log any data.

  • Some configuration data are written in the user's browser local storage and others in Jira (i.e, gadgets). 

  • It's the customer's sole responsibility to provide all the required mechanisms to keep the privacy and security of the data and access to the app.

Security policy

  • The app does not require users’ login nor JWT tokens for authenticate the app: it runs in the Jira user’s security context honoring Jira permissions.

  • The app is subscribed to the Atlassian's Bug Bounty program for regular security threats checking.

  • If a security thread is detected we will follow the protocol and recommendations provided by Atlassian in addition to the actions that we consider opportune. 

Support data

  • Customers might want to share additional information with us in order to get support (use cases, bug fixes, etc,). It is the customer's responsibility to sanitize all the information (URL, sensitive data in logs, screenshots, etc) before sharing it with us.

  • All those information is saved in an Jira Cloud instance provided by Atlassian and only our employees can read them.

  • We might share all those information with Atlassian under our sole discretion if we consider that it might help to provide better support to the client. It shall not be shared with any other third-party unless explicit written customer's authorization.

 

Acceptance

  • The customer accepts all the terms described in this policy by installing the app.

 

Feb, 15th 2023

VAT B87829354

Factoria

Estacion Chamartin s/n,

28036 Madrid (Spain)