Context
SaaSJet Time in Status (TIS) is an Atlassian Marketplace app that runs on Atlassian Forge infrastructure. In terms of GDPR, SaaSJet acts as a data processor on behalf of the Jira workspace administrator (the data controller). The app accesses Jira data solely to compute and display workflow analytics (time spent in each issue status) as instructed by the data controller.
End-User Personal Data Processed
The following categories of personal data relating to Jira end-users are processed by the app:
|
Category |
Specific Data Elements |
Source |
Purpose |
|---|---|---|---|
|
User identity — assignee |
Display name, Atlassian account ID |
Jira issue fields |
Grouping and filtering time-in-status metrics by assignee; displayed in reports and exports |
|
User identity — reporter |
Display name, Atlassian account ID |
Jira issue fields |
Filtering and reporting; displayed in issue detail views |
|
Status transition actor |
Display name, Atlassian account ID of the user who moved an issue between statuses |
Jira issue changelog |
Transition history views; identifying who performed each status change |
|
Issue status history |
Status names (from/to), transition timestamps — linked to the transition actor above |
Jira issue changelog |
Core metric computation: time spent in each status per issue |
|
Sprint participation data |
Assignee metrics per sprint (velocity, carryover, committed vs. completed story points) |
Jira Agile / sprint data |
Sprint reports and velocity analytics broken down by user |
|
Custom field values |
Any custom Jira field that contains user references, as configured by the workspace admin |
Jira issue fields |
Custom filtering and grouping in reports, as configured by the admin |
Data Not Collected
The app does not collect or process:
-
Email addresses of Jira users
-
Phone numbers or physical addresses
-
Passwords or authentication credentials
-
Payment or financial data
-
Data outside the Jira workspace scope
Data Flows and Storage
All personal data listed above is:
-
Processed in real-time on Atlassian Forge infrastructure (managed by Atlassian) to generate reports on demand
-
Not persistently stored on SaaSJet servers beyond app configuration settings (e.g., saved filters, column preferences)
-
Transmitted to third-party BI tools (Power BI, Google Sheets, Qlik) only when explicitly configured by the workspace admin
-
Included in exports (Excel, CSV, JSON) generated at the user's request, which may contain user display names as assignee/reporter columns
Retention
Upon uninstallation of the app, all associated configuration data is deleted within 90 days. Earlier deletion can be requested via support@saasjet.com.
Legal Basis for Processing
Processing is carried out under a Data Processing Agreement (DPA) between SaaSJet and the Jira workspace administrator, who acts as the data controller and determines the purposes and means of processing. The legal basis is contract performance (provision of the TIS service as subscribed by the controller).
Data Subject Rights
Requests from data subjects (e.g., Jira users) regarding their personal data should be directed to the data controller (the Jira workspace administrator). SaaSJet supports the controller in fulfilling such requests upon written notice to support@saasjet.com.