Privacy Policy — SprintPulse for Jira

Author / Data Controller: Arunakumar Tavva
Effective Date: 14 March 2026 | Last Updated: 14 March 2026

1. Overview

SprintPulse for Jira ("the App") is a self-hosted web application that connects to your Atlassian Jira instance via the Jira REST API. This Privacy Policy explains what data is accessed, how it is used, and the responsibilities of the person deploying and using the App.

2. Data Accessed

Data Type	Purpose
Jira issue metadata (summary, status, type, priority, assignee, reporter, labels, sprint, story points, dates)	Display on dashboard, KPI calculations
Jira project keys and names	Project-level filtering and grouping
Jira user display names	Assignee / reporter identification on dashboard

The App uses read-only Jira API scopes (READ). It does not create, modify, or delete any Jira data.

3. Data Storage

No external database. All Jira data is held in server memory only during the running session.
No data is persisted to disk beyond the .env file (which stores your Jira credentials locally).
No data is sent to any third-party service, analytics platform, or external server.
When the Docker container is stopped, all cached data is permanently cleared from memory.

4. Credentials Handling

Your Jira email address and API token are stored in your local .env file, excluded from Docker images via .dockerignore.
Credentials are transmitted over HTTPS to Atlassian's API endpoints only.
Credentials are never logged, displayed in the browser, or sent to any party other than Atlassian's own API servers.

5. Cookies and Sessions

The App uses a single server-side Flask session cookie to maintain your connection configuration within your browser session. No persistent tracking cookies, third-party cookies, or analytics cookies are used.

6. Third-Party Services

The App loads fonts from Google Fonts CDN for visual display purposes only. No Jira data is transmitted to Google Fonts.

7. Data Sharing

The App does not share, sell, rent, or otherwise transmit any Jira data or personal information to any third party. All data processing occurs within your own infrastructure.

8. Self-Hosted Deployment

Because the App is self-hosted, you (the deploying organisation or individual) are the data controller. You are responsible for securing the server, network access, TLS certificates, and access controls.

9. Atlassian API Usage

This App uses the Atlassian Jira REST API in accordance with Atlassian's Developer Terms of Service and the Atlassian Marketplace Partner Agreement.

10. Contact

For privacy-related questions or data deletion requests, contact:
Arunakumar Tavva
Email: support@sprintpulse.dev
Website: https://sprintpulse.dev

11. Changes to This Policy

This policy may be updated to reflect changes in the App or legal requirements. The "Last Updated" date at the top will be revised accordingly.