Privacy policy
A Jira app by Vudia. This page explains exactly what the app reads from Jira, what it stores, and what it never touches.
Summary#
Dealtrail CRM is built on Atlassian Forge and runs entirely on Atlassian's infrastructure. It has no servers of its own and makes no outbound network call to anything outside Atlassian. We do not operate any system that receives your data, and we cannot see the data your site holds in the app. The app stores the records your users enter (leads, contacts, companies, deals, products, tasks and notes) in Forge storage, scoped to your own site. The only thing it writes to Jira is a short copy of a record's details in its own read-only fields on work items linked to that record.
What it reads from Jira#
Always live, using the signed-in user's own Jira permissions:
- A work item's key, summary and status, when a user links a record to it and when a record's card shows it
- People's display names and profiles, to show who owns, assigned or changed a record
- User search results, for the owner and assignee pickers
- Whether the user holds the site's
ADMINISTERpermission, to gate the workspace settings and data tools
None of it is copied anywhere outside your site.
What it writes to Jira#
When a record is linked to a Jira work item, the app writes a short copy of its details to the app's four read-only custom fields on that work item, so that it can be found with Jira search. The copy holds record names, deal stage, amount and close date, lead status, rating and source, contact title, company name, industry and country, and the owner's or assignee's account id. It never holds email addresses or phone numbers.
Anyone who can see the work item can read those fields. They are updated when the record changes, and cleared when it is unlinked or deleted. The app never creates, transitions or comments on a work item, and writes to no other field.
What it stores#
In Forge storage, scoped to your site: the leads, contacts, companies, deals, products, tasks, notes and product line items your users create, custom field values, the audit trail (the latest 500 entries), each person's saved views and side-menu choice, a summary used by the Dashboard and Reports, and the workspace settings (currency, stale-deal threshold, deal stages and custom field definitions).
Contacts, companies and leads can include the personal details of your customers and prospects, such as names, email addresses, phone numbers, job titles and LinkedIn links. That data belongs to you: you decide what to enter, and you are responsible for having a lawful basis to keep it.
Atlassian account data#
The app stores the Atlassian account ID of the people who appear on records: the owner or assignee, and the person who created or last changed a record or made an audit-trail entry. It stores display names only for the moment they are shown. It stores no Atlassian email address, password or token.
Once a week the app reports the account IDs it holds to Atlassian's Personal data reporting API. When Atlassian reports an account as closed, the app removes that ID from every record (owned records become unassigned) and deletes that person's saved views.
Retention & deletion#
Data stays in your site's Forge storage until your users delete it in the app, or until the app is uninstalled. Deleting a record in the app is permanent. Deleting a deal also deletes its line items and notes; the audit trail keeps a line saying it was deleted until that line ages out. After an uninstall Atlassian keeps Forge hosted storage for 28 days and then removes it; reinstalling does not bring the data back on its own. See Atlassian's hosted storage data lifecycle.
Where data is stored#
Inside Atlassian's own Forge storage platform, in the same data residency as the rest of your Jira site. Nothing leaves Atlassian's infrastructure: the app declares no permission to call any external service.
Logs#
The app writes very little to logs, and only counts, for example the number of old audit entries it removed. It does not write ids, names or the contents of records to logs.
Analytics & tracking#
None. The app contains no analytics, no tracking pixels, no advertising and no third-party scripts of any kind.
Your rights#
Because we hold no copy of your data outside your own Forge storage, requests to access, correct or delete it are handled directly in the app by your own users and administrators. Anyone who can open the app can find, edit and delete a person's record. If you have a question we have not answered here, contact us using the details below.
Changes to this policy#
If what the app reads, writes or stores changes, this page changes with it.