Comment Default Visibility for Jira – Privacy Policy
Privacy Policy
Comment Default Visibility for Jira
Vendor: Winkelwagen GmbH
Last updated: March 2025
This privacy policy describes how the Comment Default Visibility for Jira app („the app“) handles data when installed on your Atlassian Jira Cloud site.
Data controller
Winkelwagen GmbH is the data controller for the app. For privacy inquiries, contact:
- Email: support+CDV@winkelwagen.de
- Website: https://winkelwagen.de
Data we store
The app stores configuration data in Atlassian Forge app storage. This data is stored per Jira site (tenant) and includes:
| Data type | Purpose |
|---|---|
| Global default scope | Default comment visibility (Internal, group, or project role) for all projects |
| Per-project overrides | Project-specific visibility overrides (project key, scope type, group ID or role name) |
| Per-component overrides | Component-specific visibility overrides (project key, component ID, scope type, group ID or role name) |
We do not store: comment content, user personal data, or any data beyond the configuration described above.
Data we process (not stored)
When the app runs, it reads and writes data via Jira REST APIs to:
- Determine the effective visibility scope for a project or issue
- Post comments with the configured visibility
- Check whether the current user is a member of a group or project role
This data (issue keys, project keys, user account IDs, group memberships, etc.) is processed in real time and is not stored by the app. It remains in Jira and is subject to Atlassian’s privacy policy and your Jira site’s data processing agreement.
Where data is stored
Configuration data is stored in Atlassian Forge infrastructure (hosted by Atlassian). Data does not leave the Atlassian platform or your Jira site’s region.
Subprocessors
The app does not use any subprocessors. All processing and storage occurs within Atlassian’s infrastructure.
External data transfer
The app does not call any external APIs. All requests go to Jira REST APIs within the Atlassian platform. There is no data egress to third-party services.
Data retention
Configuration data is retained for as long as the app is installed on your Jira site. When the app is uninstalled, Atlassian Forge storage for that site is cleared.
Your rights
Under GDPR and similar privacy laws, you have the right to:
- Access any personal data processed by the app
- Request deletion of data stored by the app
- Object to processing in certain circumstances
See Data subject requests for how to exercise these rights. (Update the link to point to your Data Subject Requests page.)
Changes
We may update this privacy policy from time to time. The „Last updated“ date at the top indicates when it was last revised. Continued use of the app after changes constitutes acceptance of the updated policy.
