Privacy Policy

Privacy Policy

Last updated - Mar 4, 2026

1. Introduction

This Privacy Policy describes how Amoeboids Technologies Pvt Ltd (“Amoeboids”, “we”, “our”, or “us”) processes data when providing the Roadmap & Idea Portal for Jira Service Management application (the “App”).

The App is available through the Atlassian Marketplace and integrates with Jira Service Management Cloud.

The App enables organizations to create public or internal portals that allow users to:

  • View product roadmaps

  • Submit ideas and feature requests

  • Vote on roadmap items

  • Post comments and feedback

Amoeboids processes customer data solely for the purpose of providing the functionality of the App.

By using the app Roadmap & Idea Portal for JSM, you acknowledge that you have reviewed the terms of our End User Licence Agreement (EULA) and this Privacy Policy, and that you have the authority to act on behalf of any person or organization for whom you are using the Product. You agree that we may collect, use, and process your Data as described in this policy.

If you are using the Product on behalf of a company, you confirm that the company is bound by this Privacy Policy.

This Privacy Policy applies to our direct customers (“Customers”). It is the responsibility of the Customer to ensure their own end users are informed of how their data is processed via this app.

2. Roles & Responsibilities

For the purposes of applicable data protection laws:

  • The customer organization using the App is the Data Controller.

  • Amoeboids Technologies Pvt Ltd acts as the Data Processor, processing data on behalf of the customer.

3. Categories of Data Processed

The App processes only the data necessary to deliver its functionality.

3.1 Data from Atlassian Accounts

For authenticated users, the App may process:

  • Atlassian account ID

  • Display name

  • Email address

  • Avatar URL

  • User permissions within Jira/JSM

This information is provided by Atlassian when users interact with the App.

3.2 Portal Interaction Data

When users interact with the portal, the following information may be stored:

  • Votes on roadmap items

  • Comments on roadmap entries

  • Submitted ideas or feature requests

  • User identifiers associated with those interactions

3.3 Anonymous Portal Interaction Data

If the portal is configured to allow anonymous access, users may be able to:

  • View roadmap items

  • Submit ideas

  • Vote on roadmap items

  • Comment on roadmap entries

In such cases, the App may store the IP address of the user for the limited purpose of preventing duplicate votes.

3.4 Jira/JSM Issue/Work item Data

The App may process data retrieved from Jira Service Management issues when rendering roadmap entries, including:

  • Issue summaries

  • Descriptions

  • Custom fields

  • Comments

  • Status and metadata

This data remains within the customer’s Jira/JSM environment.

4. How the App Processes Data

The App uses the above information solely to provide roadmap portal functionality, including:

  • Displaying roadmap information

  • Allowing users to submit feedback and ideas

  • Recording votes and comments

  • Preventing duplicate votes

  • Rendering portal pages for users

The App does not perform profiling, automated decision-making, or AI-based analysis of users.

5. Data Storage & Hosting Architecture

5.1 Forge Storage

The App is built on Atlassian Forge.

All persistent application data is stored within Atlassian’s infrastructure using Forge storage, which resides within the Atlassian cloud environment associated with the customer’s Jira/JSM site.

5.2 Portal Rendering Infrastructure

To render the portal interface, the App uses a rendering service hosted on AWS (EU – Paris region).

When the portal page is generated:

  • Jira and Forge data may be transmitted to the rendering service

  • The service uses this data to generate the portal page

  • The service does not persistently store or log this information

The rendering service functions only as a temporary processing layer.

6. Anonymous Portal Access

Customers may configure their portal to allow anonymous access.

When enabled, anonymous users may:

  • View roadmap entries

  • Submit ideas

  • Vote on roadmap items

  • Post comments

For duplicate vote prevention, the App may temporarily store IP addresses associated with voting activity.

This data is used solely for vote validation purposes.

7. Cookies and Analytics

The portal interface may use browser cookies to maintain user session information required for the proper functioning of the portal interface.

These cookies are used for purposes such as:

  • Maintaining active user sessions

  • Ensuring secure interaction with the portal

  • Supporting normal portal functionality

These cookies are necessary for the operation of the portal and do not track users across websites.

The App itself does not use cookies for advertising or behavioral tracking.

Customers may optionally configure their portals to use Google Analytics or similar analytics tools. If enabled by the customer, those services may place analytics cookies and collect usage information in accordance with their respective privacy policies.

Amoeboids does not control or manage data collected by such third-party analytics services.

8. Data Retention

Data processed by the App is retained as follows:

  • Votes, comments, and submitted ideas are retained until the user deletes or modifies the action or until the customer removes the associated content.

  • If the App is uninstalled, data may remain in Atlassian Forge storage for up to 60 days.

  • During this period the data is not actively processed and is retained only for potential recovery if the App is reinstalled.

  • After the retention window expires, the data is permanently deleted.

9. Security Measures

Amoeboids implements reasonable administrative, technical, and organizational measures designed to protect data processed by the App.

These include:

  • Secure API communication with Atlassian services

  • Infrastructure hosted within reputable cloud providers

  • Encryption in transit using HTTPS

  • Access controls for internal systems

  • Secure handling of application credentials

Because the App primarily uses Atlassian Forge storage, the majority of application data benefits from the security controls implemented by Atlassian’s cloud infrastructure.

10. Sub-Processors and Infrastructure Providers

Amoeboids may use third-party service providers to support operation of the App, such as infrastructure and email delivery providers.

These providers process data only as necessary to provide their services and under appropriate contractual safeguards.

A current list of sub-processors is maintained separately here - Data sub-processors

11. International Data Transfers

The App may process data in infrastructure located in the European Union (Paris region) and within Atlassian Cloud infrastructure.

Where personal data is transferred internationally, appropriate safeguards are applied in accordance with applicable data protection laws.

12. Data Subject Rights

Because Amoeboids acts as a Data Processor, requests related to personal data should generally be directed to the customer organization that administers the Jira site.

Data subjects may have rights under applicable data protection laws, including the right to:

  • Access personal data

  • Correct inaccurate data

  • Request deletion of personal data

  • Restrict processing

  • Object to certain processing activities

Amoeboids will assist customers in responding to such requests where required.

13. Changes to this Policy

Amoeboids may update this Privacy Policy from time to time to reflect changes in the App, legal requirements, or operational practices.

Updated versions will be published with a revised Last Updated date.

14. Contact Information

For questions regarding this Privacy Policy or security practices, contact:

Amoeboids Technologies Pvt Ltd
303, Archway, Sopanbaug
Balewadi, Pune – 411045
India
Email: security@amoeboids.com