Overview
NovaCraft Tools ("we", "our", "us") develops and maintains Atlassian Forge applications distributed through the Atlassian Marketplace. This privacy policy explains how our applications handle data.
Data Collection & Storage
What We Store
All NovaCraft Tools plugins run entirely on Atlassian Forge infrastructure. Data is stored using Forge Storage API, which means:
- All data stays within Atlassian's infrastructure. We do not operate external servers.
- Data is scoped to your Atlassian site. No data is shared between installations.
- We cannot access your data. Forge apps are sandboxed; we have no administrative access to your stored information.
Types of Data Processed
| Plugin | Data Type | Purpose |
|---|---|---|
| TimeTracker Pro | Time entries, user preferences | Core functionality |
| ChecklistPro | Checklist items, templates | Core functionality |
| AutomationEngine | Automation rules, execution logs | Core functionality |
What We Do NOT Collect
- Personal identification beyond your Atlassian account ID
- Payment or financial information (handled by Atlassian Marketplace)
- Analytics or usage tracking beyond Forge's built-in metrics
- Cookies or browser fingerprints
- Data from other Atlassian apps on your site
Data Processing
- All processing occurs within Forge's sandboxed runtime
- No data is transmitted to external servers
- No third-party services receive your data
- No AI/ML training is performed on your data
Data Retention
- Data persists as long as the app is installed on your site
- Uninstalling the app removes all associated Forge Storage data
- We do not retain backups of your data after uninstallation
Your Rights
- Access: View all stored data through each plugin's UI
- Deletion: Uninstall the app to remove all data, or use in-app delete functions
- Portability: Export features are available where applicable (CSV/JSON)
- Restriction: Disable plugins without data loss via Atlassian admin settings
Security
- Forge platform provides enterprise-grade security
- All data encrypted at rest and in transit
- SOC 2 and ISO 27001 compliance inherited from Atlassian Forge
- No external network calls (egress restricted by Forge)
For more detail, see our Trust & Security page.
Changes to This Policy
We will update this policy as needed. Material changes will be communicated through Marketplace listing updates.
Contact
For privacy-related inquiries:
Email: [email protected]
Atlassian Community: NovaCraft Tools
Compliance
This policy is designed to comply with GDPR (EU General Data Protection Regulation), CCPA (California Consumer Privacy Act), and the Atlassian Marketplace Partner Agreement.