Triage Inbox for Jira Privacy Policy

Introduction

This Privacy Policy describes how Triage Inbox for Jira ("we", "our", "the App") handles information when you use our application on Atlassian Jira. We are committed to protecting your privacy and being transparent about our data practices.

Publisher	Maciej Jezierski
Address	ul. Krotka 1a / 18, 55-010 Radwanice, Poland
VAT ID	PL8961441465

Data We Access

Triage Inbox for Jira operates as an Atlassian Forge app within your Jira instance. The only data we access is:

• Jira issue data — Issue key, summary, type, priority, reporter, labels, and status for issues in projects where triage is enabled
• Project configuration — Project ID, issue types, statuses, and resolutions for configuring the triage workflow
• User identity — Account ID and display name of users performing triage actions and configured as rotation participants
• Group membership — Jira group IDs when creator filter is configured with group-based filtering

Data We Store

The App stores data exclusively within Atlassian's Forge infrastructure (Forge SQL / TiDB):

• Triage state — Issue triage status (pending/accepted/declined/snoozed), triage timestamps, decline reasons, snooze dates, and optional notes
• Project settings — Enabled state, issue type filters, decline workflow mappings, rotation configuration, triage rules, and creator filter settings
• Rotation schedules — Participant lists, rotation type/length, and override entries
• Dashboard statistics — Daily snapshots of queue size and triage metrics for trend charts

All data is stored on Atlassian-managed infrastructure. We do not transfer any data outside of the Atlassian platform.

No AI Processing

Triage Inbox does not use artificial intelligence, machine learning, or any external processing services. All operations are deterministic and rule-based.

No External Data Transfers

The App qualifies for the "Runs on Atlassian" program. It makes zero external network requests. All API calls are to the Jira REST API within the Atlassian platform. No data leaves your Atlassian instance.

Data Controller and Processor

You (the Atlassian site administrator) are the Data Controller. We act as a Data Processor, processing data only as described above and only within the Atlassian platform.

Data Retention and Deletion

Triage data is retained in Forge SQL for as long as the App is installed. When you uninstall the App, all Forge SQL data is automatically deleted by Atlassian's platform. The "untriaged" labels added to issues remain on those issues unless manually removed.

Third-Party Sharing

We do not share, sell, or transfer any data to third parties. Period.

Data Security

Data security is managed by Atlassian's Forge platform, which provides:

• Encryption at rest and in transit
• Tenant isolation
• SOC 2 Type II compliance
• Regular security audits

Children's Privacy

The App is not directed at children under 16 and we do not knowingly collect personal information from children.

Cookies

The App does not set any cookies. It runs within Atlassian's iframe and relies on Atlassian's session management.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Contact

For questions about this Privacy Policy, contact us at support@be4.software.