Privacy Policy

1. Data Controller

George Grachev
Slovakia, European Union
Email: george@grachev.app
Website: grachev.app

2. What Data We Collect

Our apps collect only the data necessary to provide their functionality:

• Jira user information: user account ID, display name, and email address (as provided by the Atlassian platform)
• Time tracking data: issue keys, project keys, time entries, timestamps, and optional notes entered by users
• Usage context: Jira site ID and project metadata needed to associate time records correctly

We do not collect passwords, payment information, or any data outside of the above scope.

3. How We Collect Data

Data is collected automatically when you interact with our apps within Jira — for example, when you start a timer, log time, or view a report. We do not collect data outside of active app usage.

4. Where Data Is Stored

All data is stored exclusively within Atlassian Forge Storage, which is part of Atlassian's own infrastructure. We do not operate any external databases or servers for storing your personal data. Atlassian's data residency and security policies apply. See Atlassian's Privacy Policy for details.

5. How We Use Data

We use the collected data solely to:

• Provide and operate the app's features (time tracking, reporting)
• Display time records to authorised users within the same Jira instance
• Generate usage reports accessible to Jira administrators

We do not use your data for advertising, profiling, or any purpose beyond operating the app.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• Atlassian: as the infrastructure provider (Forge platform) — data is stored within their systems
• Legal obligation: if required by applicable law or a valid court order

7. Data Retention

Time tracking data is retained for as long as the app is installed in your Jira instance. Upon uninstallation, data stored in Forge Storage is deleted in accordance with Atlassian's data deletion policies. You may also request deletion at any time by contacting us at george@grachev.app.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

• Access: request a copy of your personal data
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: request that we limit processing of your data
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests

To exercise any of these rights, contact us at george@grachev.app. We will respond within 30 days. You also have the right to lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk).

9. Security

We rely on Atlassian Forge's built-in security controls, which include encryption at rest and in transit, access controls, and regular security audits. We do not handle personal data outside the Atlassian platform.

10. Children's Privacy

Our apps are intended for use by business professionals and are not directed at children under 16. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted at this URL with a revised "Last updated" date. For significant changes, we will provide notice through the Atlassian Marketplace listing.

12. Contact

For any privacy-related questions or requests:
george@grachev.app