Privacy Policy — Log Viewer for Jira

1) Scope

This Privacy Policy applies to data processed by the Log Viewer for Jira App installed in Atlassian Jira Cloud.

2) What data we process

Depending on how the App is used, we may process:

• Jira context data: issue key, project context, account ID required to run app features.
• Issue attachment metadata: filename, size, creation date, attachment ID.
• Attachment content: log/text/json file contents when a user opens an attachment in the App.
• User settings: theme, UI preferences, parser/highlight settings, selected AI provider.
• API keys:
  • Personal API keys (user-specific), if entered.
  • Optional admin fallback API key, if configured by a Jira admin.
• User-entered content: notes/comments written in the App (including line references) when posting a Jira comment.
• AI prompt/response data (optional): selected log excerpts and user prompts sent to configured AI providers when user explicitly triggers AI analysis.

3) How we use data

We process data to:

• Display and analyze log attachments in Jira issues.
• Enable search, filtering, comparison, and visualization features.
• Save user preferences and settings.
• Test AI provider connectivity (if requested by user).
• Send selected log content to an AI provider only when a user runs AI analysis.
• Post user-generated comments back to Jira when requested.

4) Data storage and retention

The App uses Atlassian Forge hosted storage to save app settings and secrets.

API keys are stored as Forge secrets.

We retain settings data until:

• the user/admin deletes it,
• the app is uninstalled, or
• data is removed through support request, where applicable.

Log attachment contents are processed for feature execution and are not stored by us beyond what is required for app functionality.

5) AI providers and external processing (optional features)

If AI analysis is enabled by a user, selected content is sent directly to the chosen provider:

• OpenAI (`api.openai.com`)
• Anthropic (`api.anthropic.com`)
• Google Gemini (`generativelanguage.googleapis.com`)
• Mistral (`api.mistral.ai`)

These providers process data under their own terms and privacy policies. We recommend reviewing those policies before enabling AI features.

6) Legal basis (where applicable)

For users in jurisdictions requiring a legal basis (e.g., GDPR), processing is based on one or more of:

• Performance of contract (providing app functionality),
• Legitimate interests (security, reliability, support),
• Consent (optional AI analysis features where applicable).

7) Data sharing

We do not sell personal data.

We share data only with:

• Atlassian (as platform and hosting provider),
• Configured AI providers (only when user invokes AI functionality),
• Service providers/subprocessors necessary to operate the App.

8) Security

We use reasonable technical and organizational measures to protect data, including:

• Forge-hosted data handling and secret storage,
• Access controls via Jira/Forge permissions,
• Limiting scopes to required functionality.

No system is completely secure; users should avoid uploading highly sensitive secrets in logs unless required and authorized.

9) International data transfers

Data may be processed in regions where Atlassian or selected AI providers operate.

Where required, we rely on appropriate safeguards provided by those services.

10) Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your data, and data portability rights.

To exercise rights, contact us at contact@lingway.io.

11) Children

The App is intended for business use and is not directed to children.

12) Changes to this policy

We may update this Privacy Policy from time to time.

We will update the "Last updated" date and, where required, provide additional notice.

13) Contact

Data Controller / Provider: Lingway

Address: Nabeul, Tunisia

Email: contact@lingway.io

Support: contact@lingway.io