Data Security and Privacy Statement

Privacy Policy

This app is built on Atlassian Forge and adheres to Atlassian’s privacy and data residency standards.

• We do not store or process any personal user data outside of Atlassian’s infrastructure.
• All user identifiers (e.g., account ID) are handled internally by Jira.
• No third-party tracking or analytics are used.
• No data is transmitted or stored outside of the Atlassian cloud.

If you have any privacy-related concerns, contact us at: privacy@nexmind.studio

Security Policy

Last updated:

• No external storage: All data is stored only within Atlassian Forge Storage.
• No sensitive tokens: We do not collect or store user passwords, OAuth tokens, or other secrets.
• Minimal data: Only voting session state (participants’ IDs, display names, avatars, votes) is stored.
• Data is never exported or shared with third parties.

Hosting & Permissions

• The app runs entirely in Atlassian’s Forge runtime (AWS infrastructure managed by Atlassian).
• We request only minimal Jira API scopes:
  read:jira-work,
  write:jira-work,
  read:jira-user,
  storage:app.
• All asUser calls respect Jira’s permission model for the logged-in user.

Encryption

• All data in transit is encrypted using HTTPS/TLS (managed by Atlassian).
• Data at rest is encrypted within Forge Storage.

Secure Development

• Regular dependency updates and static analysis.
• Input validation/sanitization on all user inputs.
• No dynamic code execution or unsafe third-party scripts.

Incident Response

We review and respond to reported vulnerabilities within 1 business day. Contact: security@nexmind.studio

Data Retention

• Session data is retained only for active sessions and is deleted when the app is uninstalled or sessions are ended.
• You can request deletion at any time via privacy@nexmind.studio.

Terms of Service

• Use at Your Own Risk: This app is provided "as is" without any warranties.
• Data Handling: We do not store data externally. All operations are confined within the Atlassian environment.
• Service Availability: While we strive for uptime, we don’t guarantee uninterrupted service.
• Termination: We reserve the right to terminate service access for misuse.
• Support: Basic support is provided via email: support@nexmind.studio