Privacy Policy & GDPR Compliance

Privacy Policy & GDPR Compliance

 

Overview

Address Custom Field for Jira Cloud is designed with privacy-first principles.

The application processes only the minimum data required to provide address search and map visualization functionality.

All Jira issue data, user data, and location data stored in issues remain within Atlassian infrastructure.

The application does not collect, store, or transmit personal data outside of Atlassian systems, except for the address string typed by the user for the purpose of retrieving address suggestions.


Data Processing Overview

The application processes the following data:

Data type

Description

Storage Location

Data type

Description

Storage Location

Address Text

Text entered by the user to search for an address

Sent to geocoding service for suggestions

Address result

Selected address suggestion

Stored inside Jira Work Item field only

Coordinates

Latitude, Longitude, combination of them and Country, Country Code and Postal Code of selected address

Stored inside Jira Work Item field only

Address source

provider to retrieve the address

Stored inside Jira Work Item field only

All stored data is saved as custom field value within Jira.

example of stored format:

{ "shortAddress": "Example Street 12", "longAddress": "Example Street 12, Tallinn, Estonia", "coordinates": "59.4370,24.7536", "latitude": 59.4370, "longitude": 24.7536, "country": "Eesti", "countryCode": "ee", "postalCode": "12345", "source": "ads" }

The application does not store or process any additional personal data.


External Data Transfers

The application uses external geocoding services to provide address suggestions.

Only the address search query typed by the user is transmitted.

No Jira data or user data is included.

External Services Used

Estonian Central Address System (ADS)

Official Estonian national address registry used to retrieve address suggestions within Estonia.

The following data is transmitted:

  • Address search query entered by the user

No Jira issue information, coordinates, or user data is transmitted.


Photon (OpenStreetMap)

Open-source geocoding service built on OpenStreetMap data and used for global address search.

The following data is transmitted to the Photon service:

  • Address search query entered by the user

No Jira issue information, coordinates, or user data is transmitted.


Data Storage

All address data selected by users is stored exclusively inside the Jira issue field.

The application does not maintain external databases containing customer data.

Stored address data is accessible through Jira functionality such as:

  • issue view

  • Jira Automation smart values

  • Jira REST API

  • integrations configured by the customer

Data retention therefore follows Atlassian’s Jira data retention policies.


Personal Data Processing

Under the General Data Protection Regulation (GDPR), personal data refers to information relating to an identifiable individual.

The Map Custom Field application:

  • does not collect user identities

  • does not track user behavior

  • does not store personal identifiers

  • does not create user profiles

  • does not perform analytics on user activity

Any personal data that may appear within addresses (for example residential addresses entered manually) is stored solely within Jira by the customer organization.

The application provider does not access or process this data outside Atlassian infrastructure.


Data Controller and Data Processor

For the use of this application:

Role

Entity

Role

Entity

Data Controller

The customer organization using Jira

Data Processor

Atlassian (Jira Cloud platform)

Application Provider

Opsgenius OÜ

Opsgenius OÜ provides the application functionality but does not independently store or process customer data outside Atlassian systems.


Data Security

The application is built using Atlassian Forge, which provides a secure runtime environment.

Forge ensures:

  • execution inside Atlassian infrastructure

  • secure authentication through Atlassian identity

  • restricted access to customer data

  • isolation between tenants

The application does not expose any endpoints that allow external access to stored address data.


Data Minimization

The application follows the principle of data minimization as defined in GDPR Article 5.

Only the following data is processed:

  • address search query (temporary transmission)

  • selected address information stored in Jira

No additional data collection occurs.


User Rights

Because all stored data resides within Jira, user rights are handled through standard Jira administration and Atlassian policies.

These include:

  • access to stored data

  • modification of stored data

  • deletion of stored data

  • data export

Users should contact their Jira administrator to exercise these rights.


Data Retention

The application does not maintain independent data storage.

Address data remains stored inside Jira until:

  • the field value is changed

  • the issue is deleted

  • the custom field is removed

  • the Jira instance is deleted

Retention policies therefore follow Atlassian Cloud retention policies.


Changes to This Privacy Policy

This policy may be updated to reflect:

  • changes in application functionality

  • regulatory requirements

  • updates to external services

Updated versions will be published in the application documentation.


Contact

If you have questions regarding privacy or data protection, please contact support:

Support portal:

https://opsgenius.atlassian.net/servicedesk/customer/portal/37