Effective starting: August 28, 2024

This document lists important security and privacy-related questions that you might have when evaluating the Advanced Columns app on your Jira Cloud instance. Should you have any additional questions, please let us know at Advanced Columns Support.

Index

What kind of data is downloaded from Jira by Advanced Columns?

In order for Advanced Columns to display data as Dynamic Boards and Advance Columns, the following data may be downloaded:

Information regarding issues, such as issue keys and issue field values;
Information regarding filters, such as its name, id, query and shares;
Information regarding the user, such as its name, avatar path (not the avatar itself) and Atlassian’s accountId.
Information about the user's group/role membership (groups, roles in projects) – this information is used to validate the user's access to issues, boards and filters.

Most of the data loaded from Jira is cached in memory, not stored in the Advanced Columns database. The expiration times of these caches vary from one minute to several hours, after which the data is removed and re-downloaded as needed.

What kind of data is stored by Advanced Columns?

The only data from Atlassian accounts stored in our database are users accountId. We need this information so users can define who have access to their boards and who can edit them. We do not store any additional personal data such as display name, email address and other Atlassian account related data except from its Id.

We store Dynamic Boards that you may create using the app such as, their name, description, columns, viewers, admins and others.

Additionally, we store Advanced Columns data that you may create when using the app such as their name, descriptions, filter Ids, chart preferences and others.

What kind of data is collected by Advanced Columns support?

By opening a support ticket on our service management portal, we collect the following data:

Email address - We need this to get back to you when solving your tickets.
Display name - Although not mandatory, if you choose to register your name on our portal, we will use it to address you by your name.
Site URL - The Jira instance’s URL is need to verify if the customer has a valid license.
Other information - You may choose to add additional information such as short and log descriptions (or even attachments) to further detail your issue. We will use the information only to solve the issue your having or to consider improvements on our app when it comes to feature requests and feedbacks.

Where are the servers located?

The app does not run on any additional servers other than Atlassian’s cloud since it is built on the Forge Platform.

How is the data encrypted?

Advanced Columns' TLS encryption and full disk encryption at-rest is provided by the Forge Platform. You can find further details regarding data protection provided by the platform here.

Who can get access to the data?

Since Advanced Columns' database is hosted by the Forge Platform through the Storage API, Easysecrets itself does not access any of the data you create on your instance.

How does Easysecrets audit access to the data?

Since Advanced Columns' is built on Forge Platform, that means that we can log some data in order to help troubleshoot issues that you may be encountering. We have access to the logs for 60 days after the log. Our App logs won’t contain sensitive information, like financial records or personal data.

You can download a copy of the logs, or disable this access, at any time.

Does Easysecrets have its own Privacy Policy?

Please see the Privacy Policy published on our website.

Did Advanced Columns fill Security and Privacy tab from the Marketplace?

Yes, you can find all details here