Privacy Policy – Stuck Since for Jira
This policy explains how personal data is handled in connection with Stuck Since: Time in Status Field for Jira (“the app”), an app for Jira Cloud built on Atlassian Forge.
1. Who is responsible
Kai Kluftinger (kluftech)
Im Großacker 4a
79249 Merzhausen, Germany
Email: info@kluftech.com
Full provider details: https://kluftech.com/imprint
2. The short version
- The app runs entirely on Atlassian’s infrastructure (“Runs on Atlassian”). We operate no servers of our own for the app.
- Issue content (summaries, descriptions, comments, attachments) is never read, stored or sent anywhere by the app.
- We, the vendor, have no access to the data the app stores in your Jira site.
- We do not sell data and use no third-party analytics or tracking.
3. Data the app processes inside your Jira site
To show how long an issue has been in its current status, the app processes:
- issue identifiers (issue id and key),
- the issue’s current status name, its creation date and its status-change history,
- the time the issue entered its current status, stored in the app’s read-only field “Status since”,
- site-wide settings made by your Jira administrator (warning and critical thresholds).
This data stays in your Jira site and in the Atlassian Forge storage that belongs to your site. It is processed by Atlassian as the platform provider under Atlassian’s own terms and privacy policy (https://www.atlassian.com/legal/privacy-policy). Your organisation decides about this data; requests about it should go to your Jira site administrator.
The app does not process names, email addresses or other profile data of Jira users.
Data residency
Stuck Since stores its data only in Atlassian Forge hosted storage and in Jira, so it follows your Jira site’s data residency location. In scope: “Status since” timestamps and issue IDs. Out of scope: technical runtime logs (issue IDs, HTTP status codes, error messages).
4. Technical logs and diagnostics
When the app runs, Atlassian Forge records technical logs and usage metrics that we can view in the Atlassian developer console. Our app limits these logs to operational metadata such as issue ids, HTTP status codes and short error messages. They contain no issue content and no user names. We use them only to find and fix errors (legal basis: Art. 6(1)(f) GDPR; our legitimate interest is a working, secure app). Retention follows Atlassian’s Forge log retention.
5. Licensing and billing through the Atlassian Marketplace
If you install or buy the app, Atlassian handles ordering, payment and licensing. Atlassian shares license information with us, which may include the name and email address of the technical or billing contact and the organisation’s name. We use this data to manage licenses, provide support and meet legal obligations (Art. 6(1)(b), (c) and (f) GDPR). We keep it as long as the license relationship lasts and as required by German retention rules for business records.
6. Support requests
If you email us at info@kluftech.com, we process your name, email address and the content of your message to answer you (Art. 6(1)(b) or (f) GDPR). Please do not send us issue content you do not want us to see. We delete support correspondence when it is no longer needed, unless legal retention periods apply.
7. Data transfers outside the EU
Atlassian may process data in countries outside the European Union, including the United States. Atlassian uses safeguards for these transfers as described in its privacy policy and data processing terms. Depending on your Atlassian plan, you may be able to choose where your Atlassian data is stored (data residency).
8. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise these rights for data we control, email info@kluftech.com. For data stored in your Jira site, please contact your Jira site administrator.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (https://www.baden-wuerttemberg.datenschutz.de).
9. Uninstalling the app
When your administrator uninstalls the app, the app stops processing data. Data in Forge storage is handled according to Atlassian’s app lifecycle rules. Values already written to the “Status since” field remain part of your issues until your administrator removes them.
10. Changes to this policy
We update this policy when the app or the law changes. The date at the top shows the latest version.