Data security & privacy statement

We know that data which you keep in Jira are extremely important to your business and we make sure that it is properly protected. Panorama runs on Heroku platform and is storing as little Jira data as possible. Each request from and to Jira is authenticated and authorized before access is allowed and all communication is secured with SSL.

What data is stored?

We do not extract or store any data that comes from your Jira instance. We store basic information about the host that is required for authentication and we store the data that is created within the add-on. To be more precise, when you create new panorama and add some issues to it, we will store the panorama name and identifiers of the issues you added (only id of the issue is stored). We also will store the identifier of the user that created the panorama or added any issues/directories to it. We do not store any information about issues, projects or users (like emails).

Sample information we store about host:

{
    "_id" : "jira:f6f1d26e-78aa-4d26-9e36-20ee3a47b6ac",
    "publicKey" : "***",
    "sharedSecret" : "***",
    "baseUrl" : "https://jqlsearchextensions.atlassian.net",
    "productType" : "jira",
    "description" : "Atlassian JIRA at https://jqlsearchextensions.atlassian.net",
    "addonInstalled" : true
}

Sample information we store once issue is added to the panorama:

{
    "_id" : ObjectId("5b582ca5835e13000443333c"),
    "panoramaId" : "5b582c98835e130004433339",
    "parentId" : "5b582c99835e13000443333a",
    "created" : ISODate("2018-07-25T07:54:13.338Z"),
    "updated" : ISODate("2018-07-25T07:54:13.338Z"),
    "type" : "ISSUE",
    "issueId" : NumberLong(12731),
    "tenantId" : "jira:f6f1d26e-78aa-4d26-9e36-20ee3a47b6ac",
    "state" : "ACTIVE",
    "childrenOrder" : [ 
        "5b582cb0835e13000443333e"
    ],
    "creator" : {
        "$ref" : "jiraUser",
        "$id" : ObjectId("5b3640f8f4a17f0004143c40")
    }
}

Logging

Panorama services write logs for support purposes, however the logging information contains only identifiers and not any user sensitive data. Access to the logs is restricted and protected.