Security & data handling

Where your data lives

Everything stays inside Atlassian’s cloud. The app is built on Forge, Atlassian’s own app platform; its snapshot and history live in Atlassian-hosted storage attached to your installation. There are no external servers, no egress, and no third-party processors.

What the app can access

Read-only scopes: work items (read:jira-work), user context (read:jira-user), and the viewer’s own profile (read:me) for the access-grant flow. The app cannot modify anything in your Jira.

What each viewer sees

Rollups are computed from data the app can read, but every render is filtered by the viewer’s own Browse Projects permission — checked live on each request. Sharing a dashboard never shares data the viewer couldn’t already see in Jira; hidden projects are counted honestly in the gadget.

What is stored

Per watched project: a snapshot of issue keys, summaries (truncated), hierarchy links, status category, and the tracked numeric fields — plus daily aggregate history (numbers only, never per-issue history). Deleting the app deletes its storage, per Forge platform guarantees.