This policy describes how Office Hasegawa (“we”) processes information through Worklog Compliance for Jira, Attachment Review & Cleanup for Confluence, and Duplicate Issue Finder for Jira (the “Apps”). It applies to app users and the Atlassian organizations where an App is installed.
1. Who is responsible
Operator: Office Hasegawa, sole proprietorship. Business address: Shibuya Dogenzaka Tokyu Building 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan. Privacy contact: [email protected].
2. Information each App processes
Worklog Compliance for Jira
- When an authorized Jira user runs a check, the App reads accessible Jira issues and worklogs, including issue identifiers, worklog authors, dates, durations, and project/account identifiers needed for administrator-configured rules.
- It calculates coverage and totals. Rule settings are stored in Forge app storage.
- Run checkpoints and scheduled job state are temporary. Checkpoints expire after 24 hours for manual runs and seven days for scheduled runs.
- Notices and run summaries are retained for up to 90 days.
- The App does not create or edit Jira worklogs.
Attachment Review & Cleanup for Confluence
- During a scan, the App reads accessible page titles and IDs, attachment filenames and metadata, page content and comments needed to check references, and labels/permissions needed to protect files.
- Content and comments are inspected in memory and are not saved by the App.
- Owner-bound scan checkpoints contain cursors, counts, and bounded extracted reference identifiers/filenames; they expire after 24 hours.
- Operation records contain selected attachment identifiers, filenames, outcomes, and timestamps and expire after 90 days.
- Settings remain in Forge app storage until changed or the app installation is removed.
- A requested action moves an attachment to Confluence trash; the App does not permanently purge it.
Duplicate Issue Finder for Jira
- For a viewed issue, the App reads its summary and description and searches issues in the same configured project that the signed-in user can access.
- Issue text and search results are processed in memory for ranking and are not stored by the App.
- Project settings are stored in Forge app storage.
- A user's dismissals identify the source and candidate issues and are stored for up to 90 days.
- License status cache entries expire after five minutes.
3. Common technical information
- The Apps use Atlassian Forge runtime and Forge app storage (KVS) for the records described above. App authorization derives from the signed-in Atlassian context and the installed app's permissions.
- Forge may process operational metadata such as invocation and error information to provide the platform.
- We do not add an external database, advertising tracker, analytics provider, email delivery service, or external AI/LLM service to these Apps.
- We do not intentionally log issue or page body text, attachment binaries, email addresses, or secrets.
Atlassian Marketplace processes transactions, subscriptions, and license status under its own terms and privacy information. Atlassian Cloud/Forge processes data as described in Atlassian’s applicable privacy and product terms.
4. Purposes and legal basis
We process information to provide the requested App features, including:
- Enforcing permissions and license checks
- Preserving resumable work and maintaining action history
- Troubleshooting failures and responding to support requests
Where applicable privacy law requires a legal basis, the Atlassian customer that installs an App determines its purposes and instructions for customer content; we process that content to provide the App. We process account and support correspondence information to operate and support the Apps and meet legal obligations.
5. Sharing and international processing
- We do not sell app data or share it with independent data brokers.
- Atlassian Forge and the relevant Atlassian Cloud product process app data as needed to run the Apps.
- Atlassian may process data in locations described by its cloud services. We do not make a specific data-residency promise; the applicable Atlassian product configuration and terms control.
6. Retention and deletion
- Temporary records expire as stated in Section 2.
- Rule settings, Confluence cleanup settings, and Duplicate Issue Finder project settings have no app-defined expiry and remain until changed or the app installation is removed.
- We do not control Atlassian’s platform-level retention, backups, or deletion timing. Atlassian’s platform may retain residual copies for its documented period.
Organization administrators should remove app settings/data through the product or uninstall the App when it is no longer needed.
7. Security and access
- Each App requests only the product scopes needed for its features.
- Jira and Confluence content is requested using the current user's product permissions. Worklog scheduled checks use an administrator-configured eligible account and that account's Jira access.
- The Apps re-check identity, permission, and relevant visibility before returning protected results or carrying out an attachment trash action.
No security measure can guarantee absolute security; please report suspected vulnerabilities to the privacy contact above.
8. Your choices and rights
- Contact the Atlassian organization administrator who installed the App to request access to, correction of, or deletion of information processed in that organization.
- We will assist the customer as required by applicable law and our obligations.
- You may also contact us directly at [email protected].
- Depending on your location, you may have additional rights under applicable privacy law. Atlassian account and Marketplace records are managed under Atlassian’s policies.
9. Children and changes
The Apps are business tools for Atlassian organizations and are not designed for children. We may update this policy as the Apps change. We will change the effective date above when we publish a revision. If a change materially affects an installed App, we will use an applicable Marketplace or product notice where available.