Privacy Policy for Metrics Reporter
Last updated: 25 January 2026
1. Overview
Metrics Reporter by SolveroX ("the App") is a Jira reporting application built on Atlassian Forge. This Privacy Policy explains how data is accessed, processed, and stored when you use the App. By installing or using the App, you agree to this Privacy Policy.
2. Data We Access and Process
The App processes data made available through Atlassian Jira APIs, including:
- Jira issue metadata (status, timestamps, SLA results, satisfaction ratings)
- Worklog and status transition details necessary for reports
- Atlassian account identifiers
- Project configuration data required to calculate metrics
The App does not intentionally access Atlassian passwords, authentication secrets, payment-card data, private authentication tokens, or credentials.
3. Personal Data
Some data processed by the App may qualify as personal data or personal information under applicable privacy or data protection laws. This may include Atlassian account identifiers, user-linked issue activity, worklogs, assignments, reporting metrics, satisfaction data, or other Jira data connected to identifiable individuals.
The App does not attempt to identify individuals beyond what is required to provide reporting functionality and logging. The App relies on data, permissions, and identifiers made available by Atlassian and your Jira configuration.
You are responsible for determining whether Jira data made available to the App contains personal data, confidential data, regulated data, employment data, customer data, or other sensitive information.
4. Data Storage and Retention
- All data is stored exclusively within Atlassian Forge storage
- Data is cached temporarily to improve reporting performance
- Cached data automatically expires based on predefined TTL values
- No long-term archival or external backups are intended by the App
5. Data Sharing and Transfers
- The App does not transfer data outside Atlassian infrastructure
- The App does not share data with third parties
- The App does not sell or monetize user or issue data
6. Security
The App runs entirely on Atlassian Forge and inherits Atlassian's security controls, including application sandboxing, scoped API access, secure storage isolation, and enforced authentication/authorization.
7. Unauthorized Access and Data Exposure Risk
The App is designed to access and process Jira data only as required for authorized reporting functionality and only through Atlassian APIs, Atlassian permissions, Jira configuration, and App functionality.
However, no software, integration, permission model, reporting system, caching system, export process, logging process, cloud service, or API-based application can be guaranteed to be completely free from defects, misconfigurations, vulnerabilities, unauthorized access, over-collection, overexposure, misrouting, data loss, data corruption, or security incidents.
Potential risks may include accidental or unintended access to Jira data, processing of more data than expected, incorrect permission handling, report-generation errors, export errors, caching errors, logging errors, cross-project exposure, cross-user exposure, cross-site exposure, cross-tenant exposure, cross-customer exposure, public disclosure, or other unauthorized disclosure.
SolveroX uses reasonable technical and organizational measures intended to reduce these risks, but SolveroX does not guarantee that such risks can be completely eliminated.
You are responsible for configuring Jira permissions, project access, issue security, user roles, groups, exports, reports, dashboards, and App access controls to reduce the risk of unauthorized access or disclosure, and you accept the risks associated with using the App.
8. Customer Responsibilities
Customers are responsible for ensuring they have the right to process the data made available to the App and for complying with internal policies and applicable laws when using the App.
Jira instances may contain personal data, confidential business information, customer information, operational information, commercially sensitive information, trade secrets, employment-related information, or other sensitive data.
You are solely responsible for determining whether the App is appropriate for the type, sensitivity, confidentiality, and regulatory status of the data in your Jira instance before installing, enabling, accessing, or using the App.
The App is not designed for Jira instances that carry highly sensitive, specially regulated or restricted data unless you have independently determined that such use is lawful, appropriate, authorized, and compatible with your obligations.
You are responsible for configuring Jira permissions, project access, issue security, user roles, groups, exports, reports, dashboards, and App access controls to prevent unauthorized access to confidential, sensitive, personal, regulated, or restricted data.
SolveroX is not responsible for your decision to store confidential, sensitive, personal, regulated, restricted, commercial, or trade-secret data in Jira, or for your decision to make such data available to the App.
9. Changes to This Policy
This Privacy Policy may be updated from time to time. Continued use of the App constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions, contact [email protected].