Privacy Policy for Plugins and Apps

Overview

Our apps run within Atlassian Cloud (Forge, Runs on Atlassian). We process only what’s required to operate in Jira/Confluence (e.g., entity IDs and essential fields; user accountId for in-product actions).

Data sources are limited to Atlassian Cloud via declared API scopes in manifest.yml. App settings and minimal technical data may be stored in Forge Storage (encrypted at rest).

We use no external processors or databases and do not disclose data to third parties.

Data access and deletion

We have no direct access to your Jira/Confluence tenant; all actions are performed by your administrators via Atlassian UI and the app’s capabilities.

Data that the app stores in Forge Storage is deleted/anonymized upon uninstall or upon admin request where an in-app delete function exists.

Data that resides inside Jira/Confluence and is governed by Atlassian (e.g., issues, pages, comments) is under your organization’s control. We cannot access or remove it on your behalf; if needed, we provide admins with step-by-step guidance to use Atlassian’s native tools.

Data subject rights (GDPR)

Please contact your site administrator for access/erasure requests; for technical questions, reach allegrolabs@protonmail.com. We provide guidance and, where applicable, expose in-app controls.