4Spec for Jira Privacy Policy

Introduction

This Privacy Policy describes how 4Spec for Jira ("we", "our", "the App") handles information when you use our application on Atlassian Jira. We are committed to protecting your privacy and being transparent about our data practices.

Entity	Maciej Jezierski
Address	ul. Krotka 1a / 18, 55-010 Radwanice, Poland
VAT ID	PL8961441465

Data We Access

4Spec for Jira operates as an Atlassian Forge app within your Jira instance. The only data we access is:

• Jira project context — project ID, board ID, and user ID provided by the Atlassian Forge platform to determine which project to display.
• Jira issues — issue summaries, types, priorities, statuses, custom fields (Requirement ID, Test Case ID, Safety Class), and issue links within the selected project. This data is read through the Jira REST API to build the requirements tree and traceability matrix.
• Forge storage & Forge SQL — requirements tree structure, test plans, test executions, baselines, audit log entries, and app configuration stored in Atlassian Forge's built-in storage and SQL database, scoped to your Jira site.

Data We Do Not Collect

We do not collect, store, or process:

• Personally identifiable information (PII) such as names, email addresses, or phone numbers
• Authentication credentials or tokens
• Data from projects not actively viewed in the App
• Analytics, telemetry, or usage tracking data
• Cookies or browser fingerprinting data
• Issue descriptions, comments, or attachments (beyond what is displayed in the App)

Data Storage

All data is stored within Atlassian's infrastructure:

• Issue data is read from Jira and never copied to external systems. Requirements and test cases are rendered client-side from live Jira data.
• App data (tree structure, test plans, executions, baselines, audit logs) is stored in Atlassian Forge storage and Forge SQL, scoped to your Jira site.
• We do not operate external databases, servers, or storage systems. 4Spec runs entirely on the Atlassian Forge platform.

Audit Log

4Spec maintains an immutable audit log within Forge SQL that records actions such as requirement creation, updates, approvals, and electronic signatures. This log is stored solely within Atlassian's infrastructure and is accessible only to users with appropriate Jira permissions.

Third-Party Sharing

We do not share, sell, rent, or transfer your data to any third parties. No analytics services, advertising networks, or data brokers receive any information from 4Spec for Jira.

Data Retention and Deletion

When you uninstall 4Spec for Jira:

• Forge storage and Forge SQL data (tree structure, test plans, executions, baselines, audit logs, configuration) is removed by Atlassian upon uninstallation.
• No Jira data is modified or deleted by the App — your issues, custom fields, and issue links remain unchanged.

Data Security

We rely on Atlassian Forge's security infrastructure for all data protection:

• The App runs in Atlassian's sandboxed Forge environment with scoped permissions.
• All API communication uses HTTPS encryption.
• The App does not store or log API tokens, user credentials, or sensitive data.

Children's Privacy

4Spec for Jira is a business tool intended for use by organizations on the Atlassian Jira platform. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the App after changes constitutes acceptance of the revised policy.

Contact

For questions about this Privacy Policy or our data practices, please contact:

Name	Maciej Jezierski
Address	ul. Krotka 1a / 18, 55-010 Radwanice, Poland
VAT ID	PL8961441465
Email	contact@be4.software