Privacy Policy

Effective date: [PLACEHOLDER: effective date]
Last updated: [PLACEHOLDER: last-updated date]
Publisher: Northcrest Market LLC, Fort Wayne, Indiana, United States
Published at: [PLACEHOLDER: https://northcrestmarket.com/privacy]

1. Scope

This Privacy Policy explains how Northcrest Market ("Northcrest Market", "we", "us") handles information in connection with the following Atlassian Cloud apps (each an "App", together the "Apps"):

It also covers information you send us directly when you contact support. It does not cover Atlassian's own handling of data; Atlassian's practices are described in the Atlassian Privacy Policy (https://www.atlassian.com/legal/privacy-policy).

2. How the Apps are built

The Apps are built on Atlassian Forge and are designed to run on Atlassian-hosted infrastructure ("Runs on Atlassian" style):

• App code runs on Atlassian's Forge platform, not on servers operated by Northcrest Market.
• App data is read from and written to your Atlassian site through Atlassian product APIs, or stored in Atlassian Forge storage (or Atlassian entity properties) associated with your site.
• The Apps are not designed to send your Jira or Confluence content to any system outside Atlassian. [PLACEHOLDER: confirm for each App that the Forge manifest declares no external egress, remotes, or Connect modules, e.g. by running forge eligibility -e production, and update this section if any App adds analytics or other egress.]

As a result, Northcrest Market does not normally receive, see, or keep copies of your Jira or Confluence content.

3. Information the Apps process

When you use an App, it processes information inside your Atlassian site only as needed to provide the feature you use:

• SprintScope for Jira: JQL queries and panel configuration you set up; issue, sprint, and board data returned by Jira for those queries (e.g. issue keys, summaries, statuses, story points/estimates, assignees as shown in Jira).
• LinkDesk for Jira: issue keys, link types, and the issues selected for a bulk link operation (create, change, or remove); any saved preferences or job state needed to complete the operation.
• SpaceTidy for Confluence: space, page, and attachment metadata (e.g. titles, last-modified dates, authors, labels) needed to identify cleanup candidates; any saved settings or review lists.
• All Apps: Atlassian account IDs of users who use the App, and site/installation identifiers provided by the Forge platform, as needed for permissions and configuration.

[PLACEHOLDER: verify the lists above against each App's actual Forge scopes and storage keys before publishing.]

This information is processed with the permissions of the Atlassian user (or the App, where the feature requires it) and stays within Atlassian's platform.

4. Forge storage

Some configuration and state (for example, saved JQL, panel settings, bulk-operation progress, or cleanup review lists) is stored in Atlassian Forge storage tied to your site's installation of the App. Forge storage is hosted and managed by Atlassian. Where Atlassian supports it, Forge storage follows the data residency of your Atlassian site. Northcrest Market does not export this data to its own systems.

5. Information we receive directly

We receive information directly only when you choose to send it, for example:

• Support requests you send by email (info@northcrestmarket.com) or phone, as listed on our Support page: your name, email address, organisation, site URL, and whatever you include in the message (descriptions, screenshots, logs). Please avoid sending sensitive content you do not need us to see.
• Atlassian Marketplace information: Atlassian may share licensing and billing contact information with us as the Marketplace partner (for example, licence type, site URL, technical/billing contact details, and evaluation status), as described in Atlassian's Marketplace terms. We use it for licensing, support, and required account communications.
• Forge platform logs and metrics: Atlassian's developer console may show us aggregate usage metrics and error logs for the Apps. We use these only to diagnose and fix problems. [PLACEHOLDER: confirm App code does not log user content; if any logging of identifiers or content occurs, describe it here.]

6. How we use information

We use information only to:

• provide, maintain, and support the Apps;
• respond to your requests and communicate about your licence or the Apps;
• diagnose errors and improve reliability;
• comply with legal obligations and enforce our terms.

We do not use your Jira or Confluence content for advertising or for training machine-learning models.

7. No sale of personal data

We do not sell personal data, and we do not share personal data for cross-context behavioural advertising.

8. Sharing

We share information only:

• with Atlassian, as the platform and Marketplace operator;
• with service providers we use to run our business (for example, our email provider for support correspondence) [PLACEHOLDER: list support/email tools actually used, e.g. Microsoft 365/Outlook, and any AI-assisted support tooling];
• when required by law, or to protect rights, safety, or property;
• in connection with a merger, acquisition, or sale of the business, subject to this Policy.

9. Retention

• Data in your Atlassian site and Forge storage: kept for as long as the App is installed. When an App is uninstalled, Atlassian's platform handles deletion of the App's Forge storage according to Atlassian's retention rules. [PLACEHOLDER: confirm current Atlassian Forge storage deletion timeline after uninstall and state it here.]
• Support correspondence: kept for [PLACEHOLDER: retention period, e.g. 24 months after the ticket is closed], then deleted, unless needed longer for legal or accounting reasons.
• Marketplace licensing records: kept as long as needed for licensing, tax, and accounting obligations [PLACEHOLDER: period].

10. Security

We rely on Atlassian's platform security for the Apps' runtime and storage, request only the Forge scopes the Apps need, and limit access to our developer and support accounts. No method of processing is perfectly secure. We do not currently hold third-party security certifications (such as SOC 2 or ISO 27001), and the Apps are not currently enrolled in a bug bounty program. To report a security issue, email info@northcrestmarket.com with "SECURITY" in the subject line.

11. Your choices and rights

• Site administrators can uninstall an App at any time from Atlassian administration.
• You may ask us to access, correct, or delete personal data we hold directly (such as support emails) by contacting us below. Depending on where you live, you may have additional rights under laws such as the GDPR, UK GDPR, or US state privacy laws. [PLACEHOLDER: counsel to confirm which laws apply and any required wording, e.g. EU/UK representative, legal basis statements.]
• For data held in your Atlassian site, please contact your site administrator and Atlassian.

12. International transfers

Northcrest Market is based in the United States. Support correspondence you send us is processed in the US. App data processed in Atlassian's platform is hosted by Atlassian according to its data residency settings. [PLACEHOLDER: transfer mechanism wording, e.g. Standard Contractual Clauses via the DPA, if needed.]

13. Children

The Apps are business tools and are not directed to children.

14. Changes

We may update this Policy. We will post the updated version on this page and update the "Last updated" date. Material changes will be noted on that page [PLACEHOLDER: and/or emailed to Marketplace technical contacts].

15. Contact

Northcrest Market LLC
Attn: Alex Adair
[PLACEHOLDER: mailing address], Fort Wayne, Indiana, United States
Email: info@northcrestmarket.com (alternate: alex.adair@northcrestmarket.com)
Phone: 260-445-4690
Website: https://northcrestmarket.com