...
This document lists important security and privacy-related questions that you might have when evaluating the Option Managerapp Manager app on your Jira Cloud instance. Should you have any additional questions, please let us know at Option Manager Support.
...
What kind of data is downloaded from Jira by Option Manager?
How does Easysecrets audit access to the data?
Did Option Managerfill Manager fill Security and Privacy tab from the Marketplace?
What kind of data is downloaded from Jira by Option Manager?
In order for Option Managerto display data as Dynamic Boards and Advance Columns, the following data may be downloaded:
Information regarding issues, such as issue keys and issue field values;
Information regarding filters, such as its name, id, query and shares;
Information regarding the user, such as its name, avatar path (not the avatar itself) and Atlassian’s accountId.
Information about the user's group/role membership (groups, roles in projects) – this information is used to validate the user's access to issues, boards and filters.
Most of the data loaded from Jira is cached in memory, not stored in the Option Managerdatabase. The expiration times of these caches vary from one minute to several hours, after which the data is removed and re-downloaded as needed.
Option Manager do not download any information.
What kind of data is stored by Option Manager?
The only data from Atlassian accounts stored in our database are users accountId. We need this information so users can define who have access to their boards and who can edit them. We do not store any additional personal data such as display name, email address and other Atlassian account related data except from its Id.
We store Dynamic Boards that you may create using the app such as, their name, description, columns, viewers, admins and others.
Additionally, we store Option Managerdata that you may create when using the app such as their name, descriptions, filter Ids, chart preferences and others.
What kind of data is collected by Option Manager support?
...
Email address - We need this to get back to you when solving your tickets;
Display name - Although not mandatory, if you choose to register your name on our portal, we will use it to address you by your name;
Site URL - The Jira instance’s URL is need to verify if the customer has a valid license;
Other information - You may choose to add additional information such as short and log descriptions (or even attachments) to further detail your issue. We will use the information only to solve the issue you are having or to consider improvements on our app when it comes to feature requests and feedbacks.
Where are the servers located?
The app does not run on any additional servers other than Atlassian’s cloud since it is built on the Forge Platform. To know more about where Atlassian's cloud are located, please check the Atlassian’s Cloud hosting infrastructure.
How is the data encrypted?
Option Manager' TLS encryption and full disk encryption at-rest is provided by the Forge Platform. You can find further details regarding data protection provided by the platform here.
Who can get access to the data?
Since Option Manager' database is hosted by the Forge Platform through the Storage API, Easysecrets itself does not access any of the data you create on your instance.
How does Easysecrets audit access to the data?
Since Option Manager' is built on Forge Platform, that means that we can log some data in order to help troubleshoot issues that you may be encountering. We have access to the logs for 60 days after the log. Our App logs won’t contain sensitive information, like financial records or personal data.
...
.
Does Easysecrets have its own Privacy Policy?
...