SaaSJet

Time in Status — End-User Data Processed as Data Processor

Context

SaaSJet Time in Status (TIS) is an Atlassian Marketplace app that runs on Atlassian Forge infrastructure. In terms of GDPR, SaaSJet acts as a data processor on behalf of the Jira workspace administrator (the data controller). The app accesses Jira data solely to compute and display workflow analytics (time spent in each issue status) as instructed by the data controller.

End-User Personal Data Processed

The following categories of personal data relating to Jira end-users are processed by the app:

Category

Specific Data Elements

Source

Purpose

User identity — assignee

Display name, Atlassian account ID

Jira issue fields

Grouping and filtering time-in-status metrics by assignee; displayed in reports and exports

User identity — reporter

Display name, Atlassian account ID

Jira issue fields

Filtering and reporting; displayed in issue detail views

Status transition actor

Display name, Atlassian account ID of the user who moved an issue between statuses

Jira issue changelog

Transition history views; identifying who performed each status change

Issue status history

Status names (from/to), transition timestamps — linked to the transition actor above

Jira issue changelog

Core metric computation: time spent in each status per issue

Sprint participation data

Assignee metrics per sprint (velocity, carryover, committed vs. completed story points)

Jira Agile / sprint data

Sprint reports and velocity analytics broken down by user

Custom field values

Any custom Jira field that contains user references, as configured by the workspace admin

Jira issue fields

Custom filtering and grouping in reports, as configured by the admin

Data Not Collected

The app does not collect or process:

  • Email addresses of Jira users

  • Phone numbers or physical addresses

  • Passwords or authentication credentials

  • Payment or financial data

  • Data outside the Jira workspace scope

Data Flows and Storage

All personal data listed above is:

  • Processed in real-time on Atlassian Forge infrastructure (managed by Atlassian) to generate reports on demand

  • Not persistently stored on SaaSJet servers beyond app configuration settings (e.g., saved filters, column preferences)

  • Transmitted to third-party BI tools (Power BI, Google Sheets, Qlik) only when explicitly configured by the workspace admin

  • Included in exports (Excel, CSV, JSON) generated at the user's request, which may contain user display names as assignee/reporter columns

Retention

Upon uninstallation of the app, all associated configuration data is deleted within 90 days. Earlier deletion can be requested via support@saasjet.com.

Processing is carried out under a Data Processing Agreement (DPA) between SaaSJet and the Jira workspace administrator, who acts as the data controller and determines the purposes and means of processing. The legal basis is contract performance (provision of the TIS service as subscribed by the controller).

Data Subject Rights

Requests from data subjects (e.g., Jira users) regarding their personal data should be directed to the data controller (the Jira workspace administrator). SaaSJet supports the controller in fulfilling such requests upon written notice to support@saasjet.com.

References