Data security and privacy
How RaleyApps add-ons for Jira and Jira Service Management access, process, store, and protect your data, including hosting locations, encryption, and data retention.
This statement describes the data access, handling, and storage practices for all Raley add-ons. It applies to every Raley app published by Inversion Point OÜ on the Atlassian Marketplace.
Hosting infrastructure
All cloud-hosted systems run on digitalcloud.com and Amazon AWS servers located in Amsterdam and the USA. Server access is limited to the RaleyApps support team.
- Data retention after uninstall: user-provided data is retained for up to 60 days, then permanently deleted.
- Third-party sharing: data is never shared with third parties except as required by law.
- Encryption: all communication between the app and Jira uses SSL and JWT encryption.
- Google API compliance: the apps comply with the Google API Services User Data Policy.
Cloud-hosted apps
Raley Email Notifications
Permissions: READ · WRITE · ADMIN · ACCESS_EMAIL_ADDRESSESWhat it reads: Jira issues, projects, and versions; user data and email addresses from Jira groups and accounts.
What it stores: configuration data (including SMTP or Slack credentials if configured), backed up for 30+ days. When audit is enabled, it writes a copy of sent notifications as private issue comments. It does not persistently store the details of your Jira issues, projects, or versions.
Gmail OAuth: when configured for Gmail, the app stores Message-ID headers and user name/email to enable email threading.
Raley Intake Forms
Permissions: READ · WRITE · ADMINWhat it does: reads issue and project metadata to build forms, and creates Jira issues and JSM customers from form submissions.
What it stores: it does not store submitted form data. All iframe rendering is HTTPS-protected, communication is secured via SSL and JWT, and configuration is backed up for 30+ days.
Raley Procurement and Quotation
Permissions: READ · WRITE · ADMIN · ACCESS_EMAIL_ADDRESSESWhat it stores: workflow statuses, project keys, issue keys, and quantitative PO data (line amounts, summaries). It does not store private user information. Configuration is backed up for 30+ days.
Raley Bookman
Permissions: READ · WRITE · DELETEWhat it reads: Jira issues matching configured JQL queries, and JSM Assets workspace information.
What it stores: app-specific booking attributes attached to Jira issues / JSM requests. It does not store private user information, and configuration is backed up for 30+ days.
Server-hosted apps (legacy, Jira Server reached end of support in 2024)
Raley Notifications (Server)
Permissions: READ · WRITE: issues, attachments, projects, and users on the host Jira serverWhat it stores: all configuration is stored locally on your Jira server. No data is transmitted to external systems or third parties. RaleyApps does not collect installation data from server instances, and disaster recovery relies on your Jira server's own database backup.