Privacy notice

1 October 2026. Provider: Jon Ander Irazusta Iribar, trading as ProfitSignal Labs. Contact: support@profitsignallabs.dev. See the provider legal notice and DPA and customer terms.

Jira and JSM data

The app reads issue/project identifiers, selected field values and schemas, updated timestamps, native approval records and changelogs using the signed-in user's current permissions. Source responses can contain actor or approver data; these are processed transiently, and the app's saved review does not retain their names, emails or raw field values.

Data stored in Forge

Versioned policies contain project IDs, protected field IDs/types, versions and effective times. They have no automatic expiry. Erasure removes the configuration while retaining minimal version markers. Personal reviews contain issue/approval IDs, policy version, fixed disposition and reason, read/save/expiry times, and an account pseudonym in the storage key. The real account ID is held separately for Atlassian privacy reporting. Reviews expire logically after 30 days and use platform TTL; physical deletion can lag. Erasure markers last at most 31 days, subject to earlier account cleanup.

Privacy maintenance

Only account IDs and the oldest retained data time are reported to Atlassian's personal-data reporting endpoint. A bounded hourly maintenance process follows Atlassian's returned reporting interval and handles required erasure. This process does not scan Jira. Overdue or failed privacy checks block history access and saving until resolved.

Exports and controls

CSV is generated from a fresh source read and includes identifiers and timestamps, not field values. Users control copies they export. New detail/history/export requests recheck source authorization. Data already viewed or copied cannot be remotely revoked. On-screen evidence expires after one minute.

Recipients and processing

The app runs in Atlassian Forge, with storage scoped per installation. It declares no external egress, advertising, third-party analytics or AI integration. Customer data is not sold or used to train AI. Atlassian platform processing and subprocessors are described in the DPA. This statement is not independent certification.

Deletion and support

Use the in-app erasure controls while you retain access, or contact support for an authenticated data request. Forge retains hosted storage for 28 days after uninstall; reinstalling does not automatically restore old data. Source Jira records and exported files are unaffected. Platform backups and logs follow their own schedules. Do not send issue content, account IDs, credentials or customer exports to the general support mailbox; start with sanitized steps and agree a covered exchange channel if needed.

Provider correspondence

The provider processes contact details and sanitized correspondence to answer enquiries, provide support, meet legal obligations and protect the service. The applicable basis depends on the purpose, including contractual steps, legitimate interests and legal obligations. Rights may include access, correction, erasure, restriction, portability and objection where applicable. Contact support to exercise rights, or complain to the competent data-protection authority. There is no automated decision about eligibility or employment.