Who we are
srcplugins ("we"), the business name of Nicholas Gibson, builds apps for Atlassian products and runs this website, srcplugins.com. This policy explains what data our apps and website handle, where it is stored, and who can see it. Contact us at contact@srcplugins.com.
Our Atlassian apps
Our Atlassian apps are built on Atlassian Forge and run on Atlassian's cloud infrastructure. They don't send your data to srcplugins servers or to any other external service unless an app's documentation says otherwise; we don't operate servers that receive your Atlassian data. Although Atlassian hosts the infrastructure, srcplugins is responsible for the privacy, security and integrity of the data our apps process. Our Data Processing Addendum sets out how we process personal data on our customers' behalf.
- Access: an app reads and changes only what its listed permissions allow, and usually acts as the signed-in user, so your site's permissions decide what it can see.
- Storage: data an app saves (settings, for example) is kept in Atlassian's Forge storage for your site, alongside your Atlassian data. Content you create, such as issues, stays in your Atlassian product. Some apps store Atlassian account IDs where a feature needs them, for example to record who changed a setting.
- Uninstalling: uninstalling an app doesn't delete content created in Jira or other Atlassian products. Forge-hosted app data is retained and then deleted under Atlassian's storage-retention policies; Atlassian currently keeps it for 28 days after uninstalling so it can be recovered on request.
- Details per app: each app's page on this website and its documentation list its permissions and exactly what it stores.
- What we receive: Atlassian gives us information needed to run and support the app, such as the sites where it is installed, the app version, license status, and error and usage logs. Our apps are designed to keep your content, credentials and tokens out of those logs.
- Atlassian: Atlassian hosts and processes this data under its own terms and the Atlassian Privacy Policy. Features that use Atlassian Rovo are processed by Rovo under Atlassian's Rovo data policies, which can include third-party AI models.
Where data is stored
- App data in Forge storage is kept in the same location as your Atlassian product and moves with it if your administrator changes your data residency. Depending on that setting, this can be the United States, the EU, Germany, the United Kingdom, Switzerland, Canada, Australia, Japan, Singapore, South Korea or India, or Atlassian's global realm, where Atlassian chooses the region. See Forge data residency.
- Content in your Atlassian products stays wherever Atlassian stores that product's data.
- Emails and support requests are forwarded by Cloudflare and stored by our email provider, which may store them in the United States and other countries.
This website
- We don't use analytics, advertising or tracking cookies. Your theme and color choices are saved only in your browser.
- Plugin demo videos are hosted on YouTube. Nothing loads from YouTube until you press play; the video then plays in YouTube's privacy-enhanced mode (youtube-nocookie.com), where Google may store data in your browser and Google's privacy policy applies.
- If you send a plugin request, the platform, request details and email address you enter are emailed to us so we can reply. The site doesn't log the content of requests.
- The site is hosted on Cloudflare, which processes standard request information, such as IP addresses, to deliver and protect it.
Sharing
We don't sell or rent personal data or use it for advertising. We share it only with the providers that run our apps and website (Atlassian, Cloudflare and our email provider), when required by law, or to protect our rights and users.
Retention and your choices
We keep emails and support requests as long as needed to respond and for our records. Content in your Atlassian products is under your site administrators' control, and Forge-hosted app data is retained as described under Uninstalling above. You can ask us to access, correct or delete personal data we hold by emailing contact@srcplugins.com.
Independently deployed copies
If you deploy your own copy of our published source code, your organization controls that deployment and its configuration, and our descriptions of our apps may not apply to modified code. This policy still covers personal data srcplugins actually receives, such as support emails.
Changes
We'll update this page and its effective date when our practices change. For material changes, we'll also promptly notify affected customers and Atlassian.