Privacy notice

Who is responsible

Controller: Klarwick (company formation in progress; this notice will be updated with the registered entity).

Contact: privacy@roleprint.app

This website

• The website sets no cookies and uses no tracking or analytics.
• It has no forms and collects nothing you type.
• It is hosted on Cloudflare. Cloudflare handles the network requests that deliver each page, including your IP address, as any web host must.

The Roleprint app

Where your data is

Roleprint runs on Atlassian Forge. What it reads and stores stays in Atlassian-hosted Forge storage for your Jira site. No third party receives it, and the app sends nothing outside Atlassian.

What it processes and why

• Permission schemes, project roles, groups, users and the Jira audit log, to build snapshots, findings and access reviews for your Jira administrators.
• For each user: account ID, display name, account type, whether the account is active, whether it is a guest, and the domain of the email address. In these user records the full email address is not kept; the domain shows which accounts come from outside your organisation.
• Jira audit log entries, stored as Jira returns them, to show who changed a scheme, role or group. They include the author's account ID, the IP address Jira records and the changed values, which can include names and email addresses.
• Review decisions and sign-offs, with the name of the administrator who made them, as evidence for your audits.
• A log of administrator actions in Roleprint, such as saving settings, starting a re-scan or an export, with the administrator's account ID.

Logs

Roleprint writes operational logs to Atlassian's Forge logging, such as error messages, account IDs, group names and project keys. Klarwick may read them to find and fix problems.

How long it is kept

Every snapshot is kept for 35 days, then one per week up to 395 days. Closed reviews and their evidence packs are kept with their hash. Audit log entries are kept for 395 days. Configuration scans are kept for 90 days, and the newest finished scan is always kept. The log of administrator actions is kept until the app is uninstalled. When the app is uninstalled, Atlassian deletes its storage after 28 days.

Your choices

Your Jira administrators decide whether Roleprint is installed. Uninstalling it removes its data as described above. For any question about your data, contact us at the address above.