Privacy Policy

1. Who we are

SolaceIn is the trading name of sole proprietor (FOP) Yurii Oleksandrovych Ivasheniuk, registered in Ukraine (“we”, “us”). We operate this website (solacein.com) and publish apps for Atlassian products on the Atlassian Marketplace — such as Time And History, Unitix Flow and Manage Board (each, an “App”). This Policy explains what personal data we process, why, how long we keep it and what rights you have. For any privacy question or request, contact [email protected].

2. Data we process in our Apps

Our Apps access your Atlassian data through Atlassian’s APIs and rely on the Atlassian permission model. Each App stores only the configuration and operational data needed to provide its features; if you need details for a specific App that are not covered below, contact us at [email protected].

The Time And History App computes its reports on the fly from the Jira REST API on behalf of the requesting user. Jira issue and changelog data is read transiently to build a report and is not permanently stored by the App, except within export files you create — by hand, or by a schedule you set up.

The App writes to Jira only when you act: saving the “Edit issue” dialog changes an issue, and saving a dashboard gadget’s configuration stores it as a property of that dashboard item, which everyone who can view that dashboard can see. Reports and gadgets never modify issues on their own.

If a user creates a scheduled report, the App generates that report on the schedule they set and sends it by email to the recipients they entered. The run reads Jira with the schedule owner’s own access, so the report contains only the issues that owner can open, and the resulting XLSX file leaves your Jira environment as an email attachment. The message itself names the report, the filters it used (which can include the names of the projects, sprints or people selected), the period, the calendar and the number of issues. It also names who scheduled it — the owner’s display name as Jira shows it, or their email address on a schedule saved before this feature was released — and links to your Jira site, so a recipient knows whom to ask to be removed. A file too large to attach is not sent, and the message says where the owner can download it instead. Recipients are typed by the schedule’s owner — the App adds nobody implicitly and does not check whether an address belongs to your organization. Delivery is handled by Amazon Simple Email Service (SES) in the EU (Frankfurt) region.

The Time And History App stores on our infrastructure:

• Technical installation data needed to connect the App to your Jira site: site identifiers and security keys provided by Atlassian during installation;
• User records and preferences: your Atlassian account ID and your App settings — selected report, time format, calendar, columns and filters. Saved filters can include the display name, account ID and avatar URL of the assignees or reporters you selected, and the names of the project, sprint or epic;
• Work calendars you configure (business days, work hours, time zones, holidays);
• Access-settings grants (which Jira groups may open which parts of the App);
• Scheduled reports you create: the schedule’s name, the report it sends and the snapshot of filters it was created with (which can include the display name, account ID and avatar URL of the assignees or reporters selected, and the names of the project, sprint or epic), its frequency, start date, start time and time zone, the email addresses of the recipients you entered, and the time and outcome of the most recent run;
• Export files you create (XLSX, CSV or PNG reports, which may contain Jira issue data you chose to export) — private to the user who created them. Your 20 most recent exports are listed in the App’s Export History, where you can delete them; older files are removed by us on request. Each run of a scheduled report produces such a file in the same way, listed in the schedule owner’s Export History;
• Feedback ratings you voluntarily submit in the App.

3. Data we process on this website

The website does not require an account and does not use advertising trackers. If you contact us by email (for example, via the “Get in Touch” or “Book a Demo” links), we process your email address and the content of your message in order to respond.

We use Google Analytics 4 (Google Ireland Limited) to understand how visitors use the site. It sets first-party cookies and collects pseudonymous usage data — pages viewed, referrer, device and browser type, approximate location derived from a truncated IP address. We do not use this data for advertising and do not combine it with data from the Apps. Google processes it on our behalf under its data-processing terms; you can opt out with the Google Analytics opt-out add-on or by blocking cookies in your browser.

4. Purposes and legal bases

• Providing the App (performance of a contract): computing reports, storing your settings and calendars, generating exports;
• Delivering scheduled reports (performance of a contract): generating a report on the schedule a user configured and emailing it to the recipients that user entered;
• Support and communication (performance of a contract / legitimate interest): responding to your requests;
• Improving the App (legitimate interest): understanding which reports are used and processing voluntary feedback;
• Security and compliance (legitimate interest / legal obligation): authenticating requests and protecting the service;
• Website analytics (legitimate interest): measuring site usage with Google Analytics to improve the website.

5. Retention

• App data (settings, calendars, grants, scheduled reports, exports, feedback) is stored while the App is installed on your site;
• after the App is uninstalled, stored data is retained to support reinstallation and is deleted upon request; scheduled reports stop running when the App is uninstalled;
• a scheduled report’s configuration, including the recipient addresses it holds, is kept until its owner deletes the schedule in the App or the App’s data is deleted on request; the export files its runs already produced stay in Export History and are not removed with it;
• your 20 most recent exports are listed in the App’s Export History, where you can delete them; older files are removed by us on request;
• support correspondence is kept as long as needed to handle the matter.

6. Sharing and international transfers

• We do not sell personal data.
• We use Amazon Web Services to host the App, store export files and deliver scheduled-report emails (Amazon Simple Email Service, EU (Frankfurt) region), internal operational tools to run and monitor it, and Google Analytics for website statistics. They process data only on our instructions; the current list is in DPA Section 6.
• A scheduled report is sent to the addresses its owner entered in the App, which may include people outside your organization, and the message and its attachment then reach whatever mail systems those recipients use. Who receives a schedule is decided by its owner in the App, not by us.
• The App integrates with Atlassian Jira; Atlassian’s processing of your data is governed by Atlassian’s own policies.
• Processing may take place in Ukraine and the European Union. Where personal data of EU/UK residents is transferred internationally, we rely on appropriate safeguards such as the Standard Contractual Clauses; see our Data Processing Addendum.

7. Security

Requests between Jira and the App are authenticated with signed tokens issued per Jira site. Export files are accessible only to the user who created them, and a schedule is visible only to the owner who created it. Recipient email addresses are masked in our operational logs. We limit access to stored data to what is needed to operate and support the App.

8. Your rights

Depending on your location, you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to its processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact [email protected]. If you are an end user of a customer’s Jira site, we may redirect your request to that customer (the data controller) where required.

9. Children

Our website and the App are business tools and are not directed at children.

10. Changes to this Policy

We may update this Policy from time to time. The current version is always published on this page with its “Last updated” date.

11. Contact

SolaceIn is the trading name of sole proprietor (FOP) Yurii Oleksandrovych Ivasheniuk, registered in Ukraine.
Website: solacein.com
Privacy requests: [email protected]
Technical issues: [email protected]