Privacy Policy
1. Overview
NodeZap builds applications distributed via the Atlassian Marketplace, Google Workspace Marketplace, and other platforms. This Privacy Policy explains how we collect, use, and protect data when you use our products.
2. Data We Collect
2.1 Data Processed by Our Apps
| Data Type | Purpose | Storage Location |
|---|---|---|
| Webhook payloads | Process data to automate workflows | Processed in-memory, not stored raw |
| Configuration data | User preferences and settings | Platform-native storage (e.g., Atlassian Forge) |
| Reference IDs | Link automated actions to records | Platform-native storage |
2.2 Data We Do NOT Collect
- ❌ Personal user information beyond what platforms provide
- ❌ Email addresses or contact details
- ❌ Browsing behavior or analytics
- ❌ Data from projects you don't configure
3. Data Storage & Residency
All data is stored within the respective platform's infrastructure.
- Atlassian apps run entirely on Atlassian Forge
- Data never leaves the platform's environment
- No external servers, databases, or third-party services are used
- Your organization's data residency settings are respected automatically
4. Data Sharing
We do not share, sell, or transfer your data to any third parties.
- No analytics services
- No advertising networks
- No external APIs called with your data
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Active mappings | Until resolved or token revoked |
| Configuration | Until app uninstalled |
| Authentication tokens | Until manually revoked or app uninstalled |
6. Security
6.1 Infrastructure Security
- Hosted on platform providers' certified infrastructure
- All data encrypted in transit (TLS 1.2+)
- All data encrypted at rest
- No direct database access—all storage via platform APIs
6.2 Application Security
- Webhook endpoints require token authentication
- Tokens are cryptographically generated
- Project isolation: each project has separate configuration
7. Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access: Request what data we store about your installation
- Rectification: Correct any inaccurate data
- Erasure: Delete your data (uninstalling the app accomplishes this)
- Portability: Request data export (contact us)
8. Children's Privacy
NodeZap products are business software tools and are not intended for use by children under 16. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last Updated" date. Continued use of our products after changes constitutes acceptance.
10. Contact Us
For privacy-related questions or concerns:
- Email: support@nodezap.com