Draft: under review, not yet in force.
Privacy Policy – Quadmira: RACI Matrix for Jira
Who we are. Quadmira is provided by [Full legal name], an individual based in Chennai, India, trading as ACL Studio ("we"). Contact: aclstudiohq@gmail.com.
1. Summary
- The app does not collect, store or process personal data about Jira users.
- The app runs entirely on Atlassian's Forge platform ("Runs on Atlassian"). It has no servers of our own and makes no calls outside Atlassian.
- We (ACL Studio) cannot see your Jira content.
2. What the app stores, and where
All data stays inside your Atlassian cloud site, hosted by Atlassian:
| Data | Where | Contents |
|---|---|---|
| RACI per work item | Jira issue property acl-raci |
References to project role IDs and team-label IDs, plus a status flag. No account IDs, names or emails. |
| Team labels | Forge storage (Atlassian-hosted) | Label names that your project admins type, e.g. "QA team". The app rejects email addresses and phone-number-like text. Please do not enter people's names. |
| Templates | Forge storage (Atlassian-hosted) | Default RACI per work type (role/label references only). |
The app reads, but does not store, work-item summaries, types, statuses and project role names in order to display them to you.
3. Logs
The app writes minimal technical logs (HTTP status codes and error types) to Atlassian's Forge logging. It never logs request or response bodies, work-item content or user identifiers. Atlassian may record platform-level metadata as described in Atlassian's own privacy policy.
4. Information we do receive (outside the app)
- Marketplace licensing information. Atlassian may share with us licence and billing/technical contact details for sites that install the app (for example, site URL, organisation name, contact name and email), as described in the Atlassian Marketplace terms. We use this only to manage licences, handle support and meet legal/tax obligations.
- Support requests. If you email us, we receive what you send. Please don't send personal data or confidential content you don't need to.
We do not sell personal data, do not use it for advertising and do not use it to train AI.
5. Retention and deletion
- Data in Forge storage is deleted by Atlassian after the app is uninstalled (Atlassian currently retains it for a short period first, about 28 days).
- Jira issue properties are part of your Jira data and are not removed automatically on uninstall. Use Space settings → Apps → Quadmira settings → Remove all RACI data in each project before uninstalling, or ask us for help.
- Licensing and support emails are kept as long as needed for the relationship and for legal/tax record-keeping, then deleted.
6. Sub-processors
Atlassian (hosting, Forge platform, Marketplace billing). Google (Gmail, for support email only).
7. Your rights
Where data-protection laws such as the GDPR, UK GDPR or India's DPDP Act apply to information we hold (section 4), you can ask for access, correction or deletion at aclstudiohq@gmail.com. Data inside your Jira site is controlled by your organisation; contact your site admin.
8. Security
See our security statement. Report vulnerabilities to aclstudiohq@gmail.com.
9. Changes
We will update this page and change the date above. Material changes will be noted in release notes.
Last updated: 24 October 2026