Jira License Optimizer · Atlassian Forge

Privacy Policy

Last updated: 2026-08-05

1. Who we are

ComTools (“we”, “us”) provides the Jira License Optimizer app on the Atlassian Marketplace.

Contact / privacy inquiries: support@shinetechcd.online · About

2. Data we process

The app runs on Atlassian Forge and stores data in Forge-hosted storage for each customer installation.

We may process:

  • Atlassian account IDs and display names of Jira seat holders
  • Email addresses via read:email-address:jira (admin license analysis; Forge asApp email APIs)
  • Derived activity fields (last detected work activity, inactive days, risk score)
  • App settings (for example average monthly seat cost)
  • Sync metadata (timestamps, status messages)
  • Protected-account selections configured by administrators
  • Product access removal audit records, including actor and target account IDs, outcome, timestamp, and affected groups

We do not collect payment card data (billing is handled by Atlassian).

3. Purpose

Data is used only to:

  • Analyze seat usage and estimate potential license waste
  • Show dashboards, user lists, and reports to Jira administrators
  • Persist sync results so admins do not need to re-scan on every page load
  • Protect critical accounts and record administrator-initiated product access removals

4. Legal basis / customer role

For Cloud customer installations, the customer (Atlassian site admin organization) is typically the data controller for end-user directory data. We process data as a processor/service provider to deliver the app.

5. Storage location and retention

  • Data is stored in Atlassian Forge storage associated with the app installation
  • Data residency follows Atlassian Cloud / Forge capabilities for the customer site
  • Data is retained while the app remains installed
  • On uninstall, the app runs a best-effort preUninstall cleanup to delete cached seat analysis, settings, protected accounts, sync keys, and removal audit records

6. Sharing

We do not sell personal data. Data stays within the customer’s Atlassian / Forge installation context except where Atlassian platform subprocessors operate the Forge runtime.

7. Security

  • Uses Atlassian Forge authentication and storage encryption controls
  • Uses the minimum scopes required for analysis
  • Product access removal runs as the current administrator and requires their Jira group-management permission
  • Protected accounts and typed confirmation reduce accidental removals

For incident handling, vulnerability management, and security controls, see our Partner Security Policy.

8. Customer rights

Site admins can:

  • Uninstall the app to stop processing and trigger cleanup
  • Contact us to request assistance with deletion questions

End users should contact their organization admin for access/deletion requests related to directory data.

9. Children

The app is intended for workplace use by organizations and is not directed at children.

10. Changes

We may update this policy. Material changes will be reflected by updating this document and the Marketplace privacy link.