- Product - denotes the Smart Attachments app for Jira Cloud.
- Service Provider - denotes a third-party organization which services or facilities we use for provision of services within our Product.
- Data - denotes any data we collect, process and manage for correct operation of our Product. The data falls into the four types, as follows:
- Technical data
- Operation data
- Analytics data
- Personal data
- Service - denotes the label management capabilities which Product provides.
- User - a person who uses the Product.
We collect technical data, Jira Cloud instance data, and user action data. Such data is typically collected and generated through your interaction with us or our product.
Specifically, we collect the following categories of data:
Technical data: When you visit, interact with, or use our product, we may collect, record or generate certain technical data about you. We do so either independently or with the help of third party Service Providers, including through the use of “cookies” and other tracking technologies.
Such data includes the following:
- URL address of your Jira Cloud instance
- app logs
- error and issue logs
The technical data we collect does not include any personally identifiable information about you.
Operation data: When you use our app, you manage labels (create, update, delete) and assign them to specific attachments. We store only names of labels and their colors. We do not collect and store mappings of labels to attachments within our Product, as this data is stored in the issue properties on the side of your Jira Cloud instance.
The app also indexes attachments for quick attachment lookup, in this case we collect and save the following attachment data:
- attachment id
- attachment name
- account id of an uploader
- MIME type
- issue id
The operation data we collect does not include any personally identifiable information about you.
Analytics data We use the analytics tools (Google Analytics) to collect data about the use and activities in our Product. Analytics tools collect data such as how often Users use a specific feature in our Product. In addition to action data, we track some additional anonymized data about you and your Jira Cloud instance, as follows:
- Client key - unique anonymized identifier of Jira Cloud instance.
- Account ID - unique anonymized identifier or a Jira user.
- App License Type - license type of our Product.
- Project type - type of a Jira project in which an action was performed (business / software / service desk).
- Project generation - generation of a Jira project in which an action was performed (classic / nextgen).
- Issue ID - unique identifier of a Jira issue (not issue key).
- Attachment ID - unique identifier of an attachment.
- File extension - file extension of an attachment on which an action was performed.
- Attachments Count - number of attachments on which an action was performed.
We do not track any additional personal data when you (or someone from your company) are using our Product itself except the technical data and analytics data outlined in this section.
We use the collected data for the following purposes:
Technical data is used for identifying and addressing the probable operational and performance issues within our Product.
Analytics data is used for identifying the frequently used features and potential points for improvement and optimization. We use it to gain a better understanding on how Users evaluate, use and interact with our Product, and how we could improve their user experience, and continue improving our Product.
Operation data is used only for service provision within our Product without any other uses.
We do not sell your personal information, technical data, operation data and activity data to any company or advertiser, as we highly respect our customers and their data. All the collected data is used only for internal purposes (operation and development of the product).
Data Location & Retention
The data we collect from you is stored, as follows:
Personal data is stored in the Atlassian Marketplace, and we can only periodically retrieve it from the Atlassian Marketplace.
Technical data (including operational logs) is stored in the encrypted form in AWS RDS in the United States of America. This data is continuously rotated.
Analytics data is stored in Google Analytics and the exact location where this data is stored is not disclosed. This data is retained for the three years.
Operation data about label management is stored in your Jira Cloud instance within issue properties. The attachment indexes for quick lookup are stored in the encrypted form in AWS RDS. Our app accesses this data when you are using our Product. This data is preserved within your Jira Cloud instance after uninstallation of our Product. The attachment indexes are removed from our database (AWS RDS) according to the Data Retention Policy after the app uninstallation.
We may engage selected third party companies and individuals to perform services complementary to our own. Such service providers include providers of Third Party Services, hosting and server co-location services, communications and content delivery networks (CDNs), data and cyber security services, fraud detection and prevention services, web analytics, e-mail distribution and monitoring services, session or activity recording services, remote access services, performance measurement, data optimization and marketing services, and our legal, compliance and financial advisors (collectively, “Service Providers“).
These Service Providers may have access to your technical data, operation data and analytics data, depending on each of their specific roles and purposes in facilitating and enhancing our Product, and may only use it for such limited purposes as determined in our agreements with them.
The data we collect from you may be shared, as follows:
Technical data is shared with the Service Provider (Amazon) as it is collected and processed by AWS.
Analytics data is shared with the Service Provider (Google) as it is collected and processed by Google Analytics.
Personal data is NOT shared with any third parties and Service Providers. Operation data is limitedly shared with the Service Provider (AWS) as it is stored on their premises.
Our Product is using services of the following Service Providers:
- Amazon Web Services (AWS) - this service is used to provide the necessary hardware, software, networking, storage, and related technology required to run the add-on and store all the related data. Although Stiltsoft company owns the code, databases, and all rights to the Smart Attachments app, you retain all rights to your data. Stiltsoft has access to data storages but can only use it in the emergency cases, such as data verification after the abrupt system failures or component malfunctions. In the rest of situations, Stiltsoft preserves this data encrypted so no third party or malefactor can access it and use it for their own purposes.
- Google Analytics - we collect analytics data with it.
Cookies and Tracking Technologies
Our Product (including some of our Service Providers) utilize “cookies” and anonymous identifiers in order for us to provide our Service and ensure that it performs properly and to analyze our performance activities. Such cookies and similar files or tags may also be temporarily placed on your device.
Please note that we do not change our practices in response to a “Do Not Track” signal in the HTTP header from a browser or mobile application, however, most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most
browsers to notify you if you receive a cookie, or to block or remove cookies altogether.
We secure your technical data and analytics data using the industry-standard physical, procedural and technical measures. The operation data is secured within your Jira Cloud instance and we secure access to it through our Product.
The personal data is secured by Atlassian and we secure access to it through the exposed data communication channel by Atlassian.
Stiltsoft may disclose personally identifiable information under special circumstances, such as to comply with subpoenas.
We may update this policy for our Product from time to time without any prior notice. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address fetched from your social account profile or by placing a prominent notice on our site.