Privacy policy
Last updated October 6, 2026
This policy explains what data Issue Type Rules (the "app"), provided by Steadyfield ("we"), handles when installed on an Atlassian Jira Cloud site.
Summary
Issue Type Rules runs entirely on Atlassian Forge. It does not send any data outside Atlassian's infrastructure, and we cannot see your Jira data.
What the app reads
- On the settings page: your projects (id, key, name, type), each project's issue types and project roles, and the groups (id and name) that match what you type in the group search, so you can build rules. Each action also checks that the person using the page is a Jira administrator.
- In the Create dialog: the account id of the person creating the issue, their group memberships, the members of the project roles your rules name, and, for a parent issue the person can see, its issue type. These are used to decide which types to show and are not stored. Only the groups and roles the rules name are sent back to the browser.
What the app stores
- Your rules (project, issue types, group and role ids and names), in Forge app storage, in the UI modifications Jira keeps for the app, and as an app property per project with rules, which the workflow validator reads. Only the app can change its app properties.
- For up to one minute, in memory only: group and role memberships and permission checks looked up for the Create dialog and the settings page.
The app stores no personal data such as names, email addresses or account ids, and never reads or stores the content of issues.
When the app hits an error, Atlassian records it in the app's logs. Those entries can contain ids (project, issue type, group, role) and Jira's error text, never names, email addresses or issue content. We can only read logs from your site if a Jira admin allows log access in the app's settings.
Where data is processed
All processing and storage happens within Atlassian Forge and your Jira site. The app makes no external network requests and has no servers of its own.
Data residency
Issue Type Rules stores data only in Atlassian products and services that support data residency, so it follows your site's data residency location, including when you move it. In scope:
- Your rules, in Forge hosted storage.
- The copies of the rules in your Jira site: the app's UI modifications and its app properties.
Nothing is stored outside Atlassian, so no data is out of scope.
Retention and deletion
Deleting a rule deletes it from app storage and from Jira. When the app is uninstalled, Atlassian marks its storage for deletion and deletes it permanently within 28 days. The UI modifications and app properties the app wrote belong to the app and only list issue type, group and role ids.
Third parties
We use no third-party processors for app data. Atlassian processes data as described in its own privacy policy.