Privacy Policy

1. Introduction

This Privacy Policy describes how Appcento ("we," "us," or "our") collects, uses, and protects information in connection with WatcherSync (the "App"), a Jira Cloud application available on the Atlassian Marketplace.

WatcherSync is designed with a privacy-first architecture — we collect the absolute minimum data needed to operate the App, and that data never leaves Atlassian's infrastructure.

3. Data we do not collect

WatcherSync does not collect, access, store, or transmit:

• Personal user data (names, email addresses, profile information)
• Issue content (summaries, descriptions, comments, attachments)
• Watcher lists or user identifiers (read transiently during execution and never persisted)
• Authentication credentials or tokens
• Analytics, tracking, or telemetry data
• Cookies or browser storage

4. Where data is stored

All data is stored exclusively in Atlassian Forge Storage (part of Atlassian's cloud infrastructure). Data is encrypted at rest by Atlassian, scoped to the Atlassian site where the App is installed, and never transmitted to any external server or Appcento-owned infrastructure.

WatcherSync makes zero external network calls. The App runs entirely within Atlassian's Forge runtime environment.

5. Third-party services

WatcherSync uses no third-party services, analytics tools, or external dependencies. The only APIs accessed are Atlassian's Jira REST APIs, called from within the Forge runtime using the App's declared permissions.

6. Data processing

During execution, WatcherSync temporarily reads watcher lists from parent issues and adds watchers to subtasks using Jira's APIs. This data is processed in-memory only and is not persisted, logged, or transmitted anywhere.

7. Data retention and deletion

Configuration data is retained in Forge Storage for as long as the App is installed. When the App is uninstalled from a Jira site, Atlassian's Forge platform handles cleanup of all associated storage data in accordance with Atlassian's data retention policies.

If you wish to delete stored configuration data while keeping the App installed, you can disable WatcherSync in each project's settings.

8. Permissions (scopes)

WatcherSync requests the following Atlassian Forge scopes — the minimum required to function:

• read:jira-work — read issue data and watcher lists to identify which watchers to copy
• write:jira-work — add watchers to subtask issues
• storage:app — store project configuration and aggregate counters in Forge Storage

9. GDPR compliance

WatcherSync is designed to be compliant with GDPR. Since WatcherSync does not store personal data, there is no personal data to access, rectify, export, or delete under GDPR data subject requests.

Any Jira user data (such as watcher lists) is managed directly by Atlassian and governed by Atlassian's own privacy policies.

10. Children's privacy

WatcherSync is a business productivity tool and is not directed at children under 16. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last Updated" date at the top of this page. Continued use of the App after any changes constitutes acceptance of the revised policy.