Privacy policy

In short

• No AryonForge servers. Our apps run on Atlassian Forge, inside Atlassian’s cloud. We don’t run servers or databases that hold your data.
• We can’t see your data. App data is kept in Atlassian Forge storage for your site, and AryonForge has no access to it.
• No tracking or analytics. The apps contain no analytics, telemetry or advertising, and your data is never sold.
• Only what’s needed. Each app stores only the information its features need.
• Uninstalling removes it. Atlassian deletes an app’s stored data when the app is uninstalled.

Who is responsible

For data inside your Atlassian site, your organisation is the data controller and AryonForge acts as a processor. Atlassian hosts the Forge platform the apps run on, and Atlassian’s own privacy commitments apply to that infrastructure.

For this website, AryonForge is the controller.

What the apps store

Depending on the app, stored data may include:

• Settings you enter, such as rules, thresholds, schedules and exemptions.
• Atlassian account IDs, to record who made a change or who an action applied to.
• Content details, such as issue, page and space identifiers, titles, file names, sizes and dates.
• Activity records. Apps that remove content or change user access keep a log, so administrators can review and undo what happened.
• Names and email addresses. Licence-management apps read these from Atlassian so administrators can see who holds a licence.

File contents are not stored. Attachment Policy Manager for Confluence can read the first 64 KB of a newly attached file to check that it really is the type its name says, when an administrator turns on file content validation. It reads this in memory and then discards it.

Each app’s page has a Privacy & data section describing what that app stores.

What we never collect

• Atlassian passwords or login credentials
• Payment details. Atlassian handles all purchasing.
• Usage analytics, tracking data or advertising profiles

Where data goes

App data is stored in Atlassian Forge storage, in the region where Atlassian hosts your site. Most apps never connect to anything outside your Atlassian site. A few features do, and only once an administrator sets them up:

• Atlassian Organization API. Licence-management apps read user activity from Atlassian’s admin API, using an organization API key you provide. The key is kept in Forge’s encrypted secret storage and is never shown back in full.
• Your paired Jira site. Cross-Site Issue Sync sends the issue details, comments (including author names) and attachments you choose to sync to the Jira site you paired it with.
• Slack or Microsoft Teams. Licence-management apps can send optional notifications to a webhook an administrator configures. These may include the names and email addresses of affected accounts.

Retention and deletion

• Settings are kept while the app is installed.
• Logs and activity records are limited in size or age, and older entries are removed automatically.
• Attachment Policy Manager for Confluence checks with Atlassian once a week which of the account IDs it stores belong to closed accounts, and removes those IDs. Its records then show “Former user”.
• Uninstalling an app removes its stored data. AryonForge holds no separate copy.

Your rights

Because app data lives in your Atlassian site, requests to access, correct or delete personal data (for example under GDPR or CCPA) are handled by your site administrators. They can manage it through the app and Atlassian’s own tools.

If you need help finding what an app has stored, email support@aryonforge.com.

Purchasing and licensing

Apps are sold through the Atlassian Marketplace. Atlassian handles payment, invoicing and tax, and no payment details reach AryonForge or the apps. An app only learns whether your site’s subscription is active.

As a Marketplace Partner, AryonForge receives standard sales reports from Atlassian, which identify purchasing organisations and billing contacts. We use these only for support and accounting.

This website

This website uses no cookies, analytics or tracking, and has no forms or accounts. Your light or dark theme choice is saved only in your own browser.

As with any website, the services that deliver its pages and fonts receive your IP address when you visit, and may keep standard logs to operate and protect them.

Changes to this policy

We update this page before any change that affects how the apps handle data, such as a new type of data or a new place it is sent. The date at the top shows the latest revision.

Contact