Privacy policy — Sumline

Sumline ("the app") is a Jira Cloud app built on Atlassian Forge and published by Sugar Systems SIA, ⟨registered address⟩, Latvia ("we", "us"). This policy explains what the app does with data when a Jira site administrator installs it, and what this website stores.

What the app does

Sumline reads issues in your Jira site and adds up their estimates and time fields across the issue hierarchy, then shows the result inside Jira. It reads on behalf of the person looking at the page, using their Jira permissions, so it never shows anyone an issue they could not open themselves.

Data the app processes

Issue data read from your Jira site: issue keys, summaries, issue types, status categories, parent links, story points, time-tracking values, sprint values and the assignee's display name and account id. This data is processed to compute rollups.
Your Atlassian account id, used only to keep each person's cached rollups separate from everyone else's.

The app processes no data from outside your Atlassian site.

Data the app stores

Everything the app stores lives in Forge Key-Value Storage, which is hosted by Atlassian inside the Atlassian cloud, in the data residency region of your site. The app stores two things:

A rollup cache: the computed numbers for an issue, a space or a set of spaces, together with the issue keys and summaries needed to show them, keyed by the viewer's account id. Each entry is treated as expired after five minutes and overwritten on the next view.
Settings chosen by your Jira administrators (which fields to roll up, which hierarchy level makes a row, the done-only switch, the mixed-estimate rule).

The app stores no passwords, no API tokens and no data about people beyond what is listed above.

Where data goes

Nowhere. The app makes no network requests to any service outside Atlassian. It has no servers of its own, uses no analytics or tracking, and shares nothing with third parties. It is eligible for Atlassian's "Runs on Atlassian" program, which is Atlassian's designation for apps with no data egress.

Retention and deletion

Cache entries are overwritten five minutes after they are computed, or as soon as an administrator changes the settings.
All app storage is deleted by Atlassian when the app is uninstalled from your site.
We hold no copy of your data, so there is nothing for us to delete or return on request; your Atlassian administrators control it entirely.

Permissions the app asks for

read:jira-work — to read issues, their fields and the site's field definitions.
storage:app — to keep the cache and settings in Forge storage.

This website

This website (https://sumline.app) is a set of static pages hosted by Netlify.

Waitlist form. If you enter your email address in the "Tell me when it's live" form, Netlify Forms stores it and emails it to us. We use it to send you one message when the app is on the Atlassian Marketplace, and for nothing else. Write to [email protected] and we will delete it.
Access logs. Netlify keeps its own short-term server logs (IP address, requested page, browser type) to run the service. We do not add analytics of our own.
Cookies. The site sets no cookies and loads no tracking scripts.

Your rights and contact

Because we do not hold your Jira data, requests about it are handled by your Atlassian site administrators. For questions about this policy, the app or the website, contact email at [email protected].

Changes

We will update this page when the app's data handling changes and note the date above. Material changes are also announced in the app's Marketplace release notes.