Privacy Policy

Project Intelligence Hub for Jira • Last updated: March 29, 2026

This Privacy Policy describes how Ivars Apps (Luis Ivars Unipessoal Lda) ("we", "us", "our") handles data in connection with the Project Intelligence Hub for Jira application ("the App"), available on the Atlassian Marketplace.

1. What Data the App Accesses

The App reads the following data from your Atlassian Jira and Confluence instances to generate reports:

• Jira issues (summary, status, priority, assignee, labels, due dates, issue type)
• Jira sprints (name, dates, goals, state)
• Jira boards (name, type)
• Jira versions (name, release date, description)
• Jira project metadata (project key, name)
• Current user identity (display name, for report headers)
• Confluence spaces and pages (for export functionality)

2. How Data is Processed

All data processing occurs entirely within the Atlassian Forge platform. The App:

• Runs in Atlassian's sandboxed Forge environment (server-side)
• Renders reports in a sandboxed iframe (client-side)
• Does NOT transmit any data to external servers
• Does NOT use third-party analytics, tracking, or advertising services
• Does NOT collect, store, or process user credentials or API tokens

3. Data Storage

The App stores minimal configuration data using Atlassian Forge Storage (KVS), which is hosted and encrypted by Atlassian within your tenant's infrastructure:

• Project settings (client name, project manager name, Confluence space key, custom footer text)

No issue data, user data, or report content is permanently stored. Reports are generated on-demand from live Jira data and are not cached.

4. Data Sharing

We do NOT share, sell, rent, or disclose any of your data to third parties. The App has no sub-processors.

5. Data Retention and Deletion

When the App is uninstalled from your Atlassian site, data stored in Forge Storage is soft deleted and retained by Atlassian according to Forge-hosted storage lifecycle policies before permanent deletion.

Forge-hosted storage is not automatically restored on reinstallation. Where Atlassian's recovery window applies, data may be recoverable for a limited period through Atlassian support workflows.

6. Data Residency

The App runs on Atlassian Forge infrastructure and follows your Atlassian tenant's data residency configuration. We do not independently store or transfer data to any specific geographic region.

7. GDPR Compliance

We act as a Data Processor under the General Data Protection Regulation (GDPR). Atlassian acts as the infrastructure provider. Your organization remains the Data Controller.

• The App processes personal data only as necessary to generate reports (display names, assignee information)
• No personal data is stored beyond the minimal project settings described above
• Data subject access requests (DSAR) should be directed to your Atlassian site administrator

8. Security

• All data at rest in Forge Storage is encrypted by Atlassian
• All communication occurs over HTTPS
• The App uses api.asUser() for all Jira API calls, ensuring proper permission scoping
• No credentials or secrets are stored in the App
• The App requests only the minimum Forge scopes necessary for functionality

9. Children's Privacy

The App is designed for business use within Atlassian products and is not intended for use by children under 16.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the App after changes constitutes acceptance.

11. Contact

For questions about this Privacy Policy or data handling practices, contact us at:

• Email: luisivars@luisivars.pt
• Company: Ivars Apps (Luis Ivars Unipessoal Lda)
• Country: Portugal