Privacy Policy

Introduction

CriticalRidge ("we," "us," or "our") operates as a data processor for applications distributed through the Atlassian Marketplace. Our apps are built exclusively on Atlassian Forge, Atlassian's cloud-native development platform, which means all data processing occurs within Atlassian's secure infrastructure.

This Privacy Policy explains how we collect, use, and protect information when you use our Atlassian Marketplace applications.

Data We Collect

We collect minimal data necessary to operate our applications. The primary data we process includes:

• Account Identifiers: Atlassian accountId for billing, licensing, and app functionality purposes
• App Configuration Data: Settings and preferences you configure within our applications
• Usage Data: Anonymous, aggregated usage statistics to improve our applications

We do not collect or store sensitive personal information such as passwords, financial data, or content from your Atlassian products beyond what is necessary for app functionality.

How Data is Processed

All data processing occurs within Atlassian's infrastructure through the Forge platform. This means:

• Your data never leaves Atlassian's secure cloud environment
• We do not have direct access to your raw data
• All processing is subject to Atlassian's security controls and compliance certifications
• Data is processed in the same region as your Atlassian products

Sub-processors

Our primary sub-processor is Atlassian, which hosts our Forge applications and processes data on our behalf. As the Forge infrastructure provider, Atlassian:

• Provides the compute and storage environment for our applications
• Manages data encryption at rest and in transit
• Maintains security certifications including SOC 2, ISO 27001, and GDPR compliance
• Handles infrastructure-level security and monitoring

For information about Atlassian's data processing practices, please refer to Atlassian's Trust Center .

Data Retention

Data associated with our applications is retained within Atlassian's infrastructure according to Atlassian's data retention policies. When you uninstall one of our applications:

• App-specific data stored in Forge storage is deleted according to Atlassian's policies
• Billing and licensing records may be retained for legal and accounting purposes
• Aggregated, anonymized usage data may be retained for analytics purposes

Your Rights

Depending on your location, you may have certain rights regarding your personal data under applicable privacy laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

• Right of Access: You may request information about the personal data we process about you
• Right to Deletion: You may request deletion of your personal data, subject to legal retention requirements
• Right to Portability: You may request a copy of your data in a portable format
• Right to Rectification: You may request correction of inaccurate personal data
• Right to Object: You may object to certain processing activities
• Right to Restrict Processing: You may request restriction of processing in certain circumstances

To exercise any of these rights, please contact us using the information provided below.