Skip to content
Inventerprises

Privacy policy

Last updated 2026-10-31

This policy explains how Inventerprises AB handles personal data in its apps for Jira Cloud and in its own contact with customers. It covers Form Behaviours and Timesheets, the paid apps sold through the Atlassian Marketplace, and Production Telemetry, a read-only app. Together they are called "the apps" below.

Who we are

Inventerprises AB, org.nr 559588-8578, Malmö, Sweden. Contact: alexander@inventerprises.se.

The short version

  • The apps are built on Atlassian Forge and carry the "Runs on Atlassian" label. They run on Atlassian's infrastructure and store their data in Atlassian's Forge storage.
  • The apps send no data outside Atlassian. We run no servers that receive your Jira data.
  • Atlassian is the only subprocessor for data handled by the apps.
  • When an app is uninstalled, Atlassian deletes the data it stored, under Forge's data retention rules.

Two roles

Processor for your Jira data. When your organization installs an app, the organization decides what data goes into Jira and how the app is used. For that data your organization is the controller and Inventerprises AB is the processor. Our Data Processing Addendum sets out the terms.

Controller for our own contact data. When you email us, ask for support, or hold a license for one of our apps, we handle your name, email address, organization and what you tell us. For that data Inventerprises AB is the controller.

What each app handles

Form Behaviours

Stores the form rules that your Jira administrators define. A rule can contain Atlassian account IDs, for example in a condition that applies a rule only to certain users. To apply rules, the app reads the fields of the Jira form being shown, inside Atlassian's platform, and keeps none of the values people enter. A copy of each rule that is on is kept in your Jira site as a UI modification, so Jira can apply it. The app stores no issue content, names or email addresses.

Timesheets

Stores weekly timesheets (the owner's Atlassian account ID, the week, the team, and each line's issue key, issue summary at submission, day, hours and account tag), their history of submissions, approvals, rejections and reopenings with the account ID, time and any feedback or reason given, the account tag of each worklog, the settings (time zone, weekly hours, client accounts, project default tags, and teams with the account IDs of members and approvers), locked periods with the account ID of the admin who locked them, an audit log of changes made in Jira to locked periods and submitted weeks, and the display names of people who opened the timesheet. It stores no email addresses, avatars, worklog comments or issue descriptions. When Atlassian reports an account as closed, the app deletes that person's display name, replaces their account ID with an alias, and removes the comments and reasons they wrote. Time recorded in Timesheets is written to Jira as worklogs. Those worklogs are Jira data and stay in Jira under your site's own settings.

Production Telemetry

Uses Jira read scopes only. It reads issues and boards from your Jira site and stores its settings and computed results in Forge storage. It cannot change anything in Jira.

None of the apps is designed to handle special categories of personal data. Please do not put such data in form rules or timesheets.

Where the data lives

All app data stays in Atlassian's cloud, in Forge storage tied to your Jira site. Where it is stored follows Atlassian's data residency rules for Forge apps and your site. The apps make no calls to any service outside Atlassian.

In the normal course of operation we do not see the data your apps store. Atlassian gives app vendors operational logs and usage metrics for their apps. We keep our own log statements free of issue content and form data, and we use these logs only to keep the apps working.

Subprocessors

For data handled by the apps: Atlassian (Atlassian Pty Ltd and its affiliates), which hosts and runs the apps and their storage through Forge. There are no others.

For our own contact data: our email provider, which holds correspondence sent to alexander@inventerprises.se, and Atlassian, which shares license and contact details with us as the app vendor on the Atlassian Marketplace. This website is hosted by Vercel, whose servers keep standard request logs.

Our own contact data

We use it to answer you, provide support, manage licenses, and keep the accounting records Swedish law requires.

  • Support and correspondence: legitimate interest in answering you and supporting the apps (GDPR Art. 6(1)(f)).
  • Licenses and billing records: performance of the contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).

We do not sell personal data, and we do not use it for advertising. We send no newsletters.

Retention

  • App data in Forge storage: deleted by Atlassian after the app is uninstalled from your site, under Forge's data retention rules.
  • Jira worklogs written by Timesheets: stay in Jira after uninstall, because they are your Jira data. Delete them in Jira if you no longer want them.
  • Support correspondence: kept for as long as it is useful for supporting you, and deleted within 24 months of the last contact unless you ask us to delete it sooner.
  • Accounting records: kept for as long as Swedish accounting law requires.

Transfers outside the EU and EEA

We do not transfer app data anywhere ourselves. Atlassian may process data outside the EU and EEA and relies on the safeguards described in its own data processing terms, such as the EU Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to processing, and to receive your data in a portable format. Where processing is based on consent, you can withdraw it at any time.

For data inside the apps, your organization is the controller. Contact your Jira administrator first; we will help your organization answer the request. For our own contact data, write to alexander@inventerprises.se. We answer within one month.

You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or to the data protection authority where you live.

Cookies

This website sets no cookies and runs no analytics or tracking scripts. The apps set no cookies of their own; Atlassian's products set their own cookies under Atlassian's policies.

Changes

We will update this page when how we handle data changes, and change the date at the top. Material changes to how app data is processed are announced to customers in advance, as the DPA describes.

Contact

Inventerprises AB, Malmö, Sweden. alexander@inventerprises.se.