Privacy Policy for Assets Gadgets for Jira Dashboards & Reporting

Privacy Policy for Assets Gadgets for Jira Dashboards & Reporting

Introduction

Assets Gadgets for Jira Dashboards & Reporting respects your privacy and is committed to protecting personal data. This policy describes how we handle data when you use our Forge application.

Data Collection — application functionality

The app reads and displays data from Jira and Jira Service Management Assets according to your configuration (AQL queries, gadget settings, portal settings). That customer content is processed within the Atlassian Forge environment and Atlassian APIs. We do not copy customer content to Moy Apps-owned application servers for storage.

Configuration data (gadget settings, global settings, My Assets portal settings) is persisted in Forge app storage so the app can function.

Data Collection — product analytics

We collect product usage analytics through journy.io to understand feature adoption and improve the product.

Collected in analytics

Not collected in analytics

Collected in analytics

Not collected in analytics

Atlassian accountId (opaque Atlassian-issued user identifier)

User name and email

Account/site identifier (your Jira cloud site)

Customer AQL queries or results

Gadget type, feature flags, counts, enums

Asset names, attribute values, schema names

Size buckets (e.g. result count ranges)

URLs, group names, table titles

Portal/admin usage outcomes (success, error, table counts)

Exportable or identifiable customer content

The acting user is identified by their Atlassian accountId. We do not collect the user’s name or email; the accountId may be used to look up publicly available Atlassian profile information via Atlassian APIs for support and customer-success purposes.

Analytics is sent server-side from Forge backend functions only. Events are deduplicated where appropriate (e.g. at most one “gadget viewed” event per gadget instance per user per 24 hours).

The app manifest declares egress to analyze.journy.io with analytics category and no in-scope end-user data (EUD).

Legal basis (GDPR)

Where the EU General Data Protection Regulation (GDPR) applies, we process the limited analytics data described above on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in understanding feature adoption, ensuring reliability, and supporting customers. We act as a data controller for this product analytics, and journy.io acts as our processor under a data processing agreement.

Data Use

We use product analytics to measure adoption, reliability, and feature usage, and to support and assist customers. We do not sell personal data or customer content to third parties.

Data Sharing

Product analytics is processed by journy.io as our analytics provider. They process the event data on our behalf for product improvement purposes.

Operational app data remains within Atlassian’s platform except for the limited analytics described above.

Data Security

We implement appropriate technical and organizational measures, including property allowlists/denylists, so analytics payloads do not contain customer content.

Data Retention

Forge app configuration retention follows Atlassian Forge storage policies. Analytics retention is governed by journy.io and our internal analytics retention settings.

Your Rights

Under the EU General Data Protection Regulation (GDPR) and similar laws, you may have rights to access, correct, delete, restrict, or object to processing of personal data, as well as the right to lodge a complaint with a supervisory authority. Analytics events are keyed to your Atlassian accountId; contact us and we will assist with requests relating to your data.

Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page.

Related documentation

Contact Us

Questions about this policy: https://moy-apps.atlassian.net/servicedesk/customer/portal/2

Governing Law

This policy is governed by the laws of the Federal Republic of Germany and applicable European Union law, including the EU General Data Protection Regulation (GDPR).