Spreadsheet Issue Field Editor - Privacy Policy

Effective date: 14 Dec 2020 

This Privacy Policy describes how we - Stiltsoft Europe OÜ (“Stiltsoft”, “we”, “our” or “us”) collect, store, use and disclose personal data regarding individuals (“you”) who use our app Spreadsheet Issue Field Editor for Jira Cloud.

Your privacy is important to us, and we are strongly committed to making our practices regarding your personal data more transparent and fairer. Please read this Privacy Policy carefully and make sure that you fully understand and agree to it.

This Privacy Policy for our Product forms a part of our End User License Agreement and our general Privacy Policy.

Terms

Throughout this Privacy Policy we are using the following terms:

1. Product - denotes the Spreadsheet Issue Field Editor app for Jira Cloud.
2. Service Provider - denotes a third-party organization which services or facilities we use for provision of services within our Product.
3. Data - denotes any data we collect, process and manage for correct operation of our Product. The data falls into the four types, as follows:
   • Technical data
   • Operation data
   • Analytics data
   • Personal data
4. Service - denotes the label management capabilities which Product provides.
5. User - a person who uses the Product.

Data Collection

We collect technical data, Jira Cloud instance data, and user action data. Such data is typically collected and generated through your interaction with us or our product.

Specifically, we collect the following categories of data:

Technical data: When you visit, interact with, or use our product, we may collect, record or generate certain technical data about you. We do so either independently or with the help of third party Service Providers, including through the use of “cookies” and other tracking technologies.

Such data includes the following:

• URL address of your Jira Cloud instance
• app logs
• error and issue logs

The technical data we collect does not include any personally identifiable information about you.

Operation data: When you use our Product, you manage issues and fields within them. It does not save the issue data. The Product allows you to manage views which store the set and order of columns, as well as the specified JQL query in the AWS RDS database.

The following information of the view is saved to the database of the Product:

• client key
• account id
• JQL query
• identifies of fields
• name of the view
• created time
• flag that the view is private

The operation data we collect does not include any personally identifiable information about you.

Analytics data We use the analytics tools (Google Analytics) to collect data about the use and activities in our Product. Analytics tools collect data such as how often Users are editing this or that field, or using a specific feature of the app.

In addition to action data, we track some additional anonymized data about you and your Jira Cloud instance, as follows:

• Client key - unique anonymized identifier of Jira Cloud instance.
• Account ID - unique anonymized identifier or a Jira user.
• App License Type - license type for our Product.
• Project type - type of a Jira project in which an action was performed (business / software / service desk).
• Project generation - generation of a Jira project in which an action was performed (classic / nextgen).
• Column name - name or type of the field.
• Field Values count - number of values that were edited.
• Issue count - number of issues outputted by a JQL query.

Personal data: When you start subscription (either trial or paid) Atlassian provides us with the personal data of a person who initiated the subscription. We do not collect this information, we only control it. For the details on this please see our general Privacy Policy.

We do not track any additional personal data when you (or someone from your company) are using our Product itself except the technical data and analytics data outlined in this section.

Data Uses

We use the collected data for the following purposes:

Personal data is used for support services and marketing purposes. For the details on this, please see our general Privacy Policy.

Technical data is used for identifying and addressing the probable operational and performance issues within our Product.

Analytics data is used for identifying the frequently used features and potential points for improvement and optimization. We use it to gain a better understanding on how Users evaluate, use and interact with our Product, and how we could improve their user experience, and continue improving our Product.

Operation data is used only for service provision within our Product without any other uses.

We do not sell your personal information, technical data, operation data and activity data to any company or advertiser, as we highly respect our customers and their data. All the collected data is used only for internal purposes (operation and development of the product).

Data Location & Retention

The data we collect from you is stored, as follows:

Personal data is stored in the Atlassian Marketplace, and we can only periodically retrieve it from the Atlassian Marketplace.

Technical data (including operational logs) is stored in the encrypted form in AWS RDS in the United States of America. This data is continuously rotated.

Analytics data is stored in Google Analytics and the exact location where this data is stored is not disclosed. This data is retained for the three years.

Operation data about views is stored in the encrypted form in AWS RDS in the United States of America. Our app accesses this data when you are using our Product. The views are removed from our database (AWS RDS) according to the Data Retention Policy after the app uninstallation.

Data Sharing

We may engage selected third party companies and individuals to perform services complementary to our own. Such service providers include providers of Third Party Services, hosting and server co-location services, communications and content delivery networks (CDNs), data and cyber security services, fraud detection and prevention services, web analytics, e-mail distribution and monitoring services, session or activity recording services, remote access services, performance measurement, data optimization and marketing services, and our legal, compliance and financial advisors (collectively, “Service Providers“).

These Service Providers may have access to your technical data, operation data and analytics data, depending on each of their specific roles and purposes in facilitating and enhancing our Product, and may only use it for such limited purposes as determined in our agreements with them.

The data we collect from you may be shared, as follows:

Technical data is shared with the Service Provider (Amazon) as it is collected and processed by AWS.

Analytics data is shared with the Service Provider (Google) as it is collected and processed by Google Analytics.

Operation data is limitedly shared with the Service Provider (AWS) as it is stored on their premises.

Personal data is NOT shared with any third parties and Service Providers.

Service Providers

Our Product is using services of the following Service Providers:

• Amazon Web Services (AWS) - this service is used to provide the necessary hardware, software, networking, storage, and related technology required to run the add-on and store all the related data. Although Stiltsoft company owns the code, databases, and all rights to the Spreadsheet Issue Field Editor app, you retain all rights to your data. Stiltsoft has access to data storages but can only use it in the emergency cases, such as data verification after the abrupt system failures or component malfunctions. In the rest of situations, Stiltsoft preserves this data encrypted so no third party or malefactor can access it and use it for their own purposes.
• Google Analytics - we collect analytics data with it.

Cookies and Tracking Technologies

We and our Service Providers use cookies and other technologies for performance, tracking, and analytics purposes.

Our Product (including some of our Service Providers) utilize “cookies” and anonymous identifiers in order for us to provide our Service and ensure that it performs properly and to analyze our performance activities. Such cookies and similar files or tags may also be temporarily placed on your device.

Please note that we do not change our practices in response to a “Do Not Track” signal in the HTTP header from a browser or mobile application, however, most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most
browsers to notify you if you receive a cookie, or to block or remove cookies altogether.

Data Security

We secure your technical data and analytics data using the industry-standard physical, procedural and technical measures. The operation data is secured within your Jira Cloud instance and we secure access to it through our Product.

The personal data is secured by Atlassian and we secure access to it through the exposed data communication channel by Atlassian.

Disclosure

Stiltsoft Europe OÜ may disclose personally identifiable information under special circumstances, such as to comply with subpoenas.

Changes

We may update this policy for our Product from time to time without any prior notice. We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address fetched from your social account profile or by placing a prominent notice on our site.

Additional Notices

If you have any questions regarding this Privacy Policy, please address them to tech-support@stiltsoft.com.