Legal Information
Breadcrumbs

Data Security and Privacy Policy

Last updated date of this policy: 17.02.2026

Please note: ij-solutions GmbH is named ij-solutions in the following.

This Data Security and Privacy Policy describes what data ij-solutions collects, how ij-solutions processes personal data, and which security measures are applied when providing Atlassian Marketplace apps and related support services.

This policy applies to all ij-solutions apps listed on the Atlassian Marketplace.

1. Scope and Hosting Model (Forge / Runs on Atlassian)

All ij-solutions Atlassian Marketplace apps are built using Atlassian Forge and carry the Runs on Atlassian badge.

This means that app code and processing run entirely on Atlassian infrastructure. ij-solutions does not operate separate hosting infrastructure for these apps and does not transfer Jira or Confluence instance data to ij-solutions-controlled servers.

The same applies to our Atlassian Data Center apps, which run exclusively within the customer’s self-managed Jira environment. ij-solutions does not operate external infrastructure for these apps and does not collect or store customer instance data outside of the customer-controlled host system.

2. Data Handling and Storage

2.1 Data collected via Atlassian Marketplace

If you download and install an ij-solutions app from the Atlassian Marketplace which is not free of charge, Atlassian provides ij-solutions with contact details of your technical contact, including:

  • first name and last name

  • email address

  • company name

ij-solutions may use the email address to ask about experiences with apps, ask for feature suggestions, provide support-related information, or inform about new developments.

You can cancel this subscription at any time by writing an email to info@ij-solutions.com.

2.2 Data collected from customer instances (Jira / Confluence)

ij-solutions does not collect or store customer content from Jira or Confluence instances outside Atlassian.

In particular, ij-solutions does not store issue data, page data, comments, attachments, or user-generated content on ij-solutions infrastructure.

2.3 Support communication and customer-provided data

ij-solutions collects and stores data and information sent by email as well as responses to those emails. This also applies to emails to ij-solutions support and information provided in ij-solutions service management.

For support purposes, customers may voluntarily share information such as screenshots, logs, configuration details, or excerpts of Jira/Confluence content. The customer decides what information is provided and to what extent.

Such data is used solely for troubleshooting and support purposes.

3. Security Controls for Stored Data

ij-solutions applies appropriate technical and organizational measures to protect customer-related information that may be handled in support or communication processes, including:

  • Access control: Access to support systems and communication channels is restricted to authorized personnel only.

  • Least privilege: Access is granted only when required for support or operational purposes.

  • Secure communication: Email and web-based communication is handled using secure transport mechanisms (e.g., TLS/HTTPS where supported).

  • Confidential handling: Customer-provided information is treated as confidential and is only used for the intended purpose.

  • Secure development practices: ij-solutions follows internal development and review processes to reduce the risk of vulnerabilities in its apps.

Since all ij-solutions apps run on Atlassian Forge and carry the Runs on Atlassian badge, processing of Jira/Confluence instance data remains within Atlassian’s infrastructure and security boundary.

4. Incident Response and Breach Notification

ij-solutions maintains an incident response process to detect, assess, and respond to security incidents.

If ij-solutions becomes aware of a confirmed security incident impacting customer data processed through its support systems or related communication channels, ij-solutions will notify affected customers without undue delay and provide relevant details where possible.

5. Data Retention and Deletion

ij-solutions retains customer-related communication data (such as emails and support ticket content) only as long as necessary for support, operational purposes, or legal obligations.

Customers may request deletion of support communication data by contacting info@ij-solutions.com, provided no legal retention requirements prevent deletion.

6. Data Sharing

ij-solutions will neither sell nor share your data with any third parties unless explicitly permitted by applicable law.

7. Acceptance of this Policy

If you disagree with this policy, do not use ij-solutions apps and do not communicate with ij-solutions via email or service management.

If you have concerns or questions regarding this policy, feel free to contact ij-solutions via email at:

📩 info@ij-solutions.com