Privacy Policy

Introduction

Showel ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our Atlassian Forge application that provides AI usage analytics for development teams.

Important: Showel is built on Atlassian Forge, a serverless platform. We do not operate our own servers or store any of your data outside of Atlassian's secure infrastructure.

Data Storage and Architecture

No Independent Data Storage

Showel does not store any data on our own servers. All data is:

• Stored within Atlassian's Forge platform infrastructure
• Subject to Atlassian's security and data protection standards
• Never transmitted to or stored on third-party servers operated by Showel
• Encrypted using Atlassian's enterprise-grade encryption

How the Application Works

Showel operates entirely within your Jira Cloud instance:

• All application code runs on Atlassian's Forge platform
• Data is accessed through official Atlassian APIs
• External API calls are made only to authorized AI platforms (Cursor AI) using credentials you provide
• API responses are processed in real-time and stored only in Atlassian Forge storage

Information We Access

From Atlassian/Jira

When you install Showel, we access the following information from your Jira instance:

• User Information: Names, email addresses, and user IDs to match with AI usage data
• Issue Information: Issue keys and assignee information for displaying usage on issues
• Custom Field Data: To display token usage information on Jira issues

From AI Platforms

With your explicit configuration, we access:

• Cursor AI: Token usage data, developer identifiers, and usage timestamps
• API Credentials: Your API keys are encrypted and stored securely within Atlassian Forge storage

Note: We do not access, view, or store any of your code, prompts, or AI-generated content. We only collect usage metrics and statistics.

How We Use Information

Information accessed through Showel is used solely to:

• Display AI usage analytics and reports within your Jira instance
• Calculate token consumption and cost estimates
• Generate usage statistics and trends
• Provide custom fields showing developer-specific usage
• Improve and maintain the application's functionality

Data Security

Atlassian Forge Security

Since Showel runs on Atlassian Forge:

• All data is encrypted at rest and in transit using Atlassian's security standards
• Data is stored in Atlassian's certified data centers
• Access controls are managed through Atlassian's IAM (Identity and Access Management)
• Regular security audits are performed by Atlassian

API Security

• API keys are encrypted using industry-standard encryption
• All API communications use HTTPS/TLS encryption
• API keys are never logged or exposed in application logs
• You can revoke API access at any time through the configuration page

Data Sharing and Third Parties

We do not sell, rent, or share your data with third parties.

The only data sharing that occurs is:

• Atlassian: As the hosting platform for Forge apps, Atlassian stores and manages the data
• AI Platforms: We make API calls to retrieve usage data using credentials you provide

We do not use any third-party analytics, tracking, or advertising services.

Data Retention and Deletion

Retention

Usage data is retained within Atlassian Forge storage as long as:

• The Showel app remains installed on your Jira instance
• You continue to use the application

Deletion

You can delete your data by:

• Uninstalling the app: All data stored by Showel in Forge storage is automatically deleted
• Revoking API access: Remove API credentials from the configuration page

Upon uninstallation, all data is removed from Atlassian Forge storage in accordance with Atlassian's data retention policies.

Compliance and Certifications

As an Atlassian Forge application, Showel inherits Atlassian's compliance certifications:

• GDPR: Compliant with EU General Data Protection Regulation
• SOC 2: Atlassian maintains SOC 2 Type II certification
• ISO 27001: Atlassian is ISO 27001 certified
• Privacy Shield: Adheres to applicable data transfer frameworks

Your Rights

You have the right to:

• Access: View all data stored by the application through the Showel interface
• Rectification: Update or correct configuration and API credentials
• Erasure: Delete all data by uninstalling the application
• Data Portability: Export reports and usage data through the application interface
• Object: Discontinue data collection by disconnecting API integrations

Cookies and Tracking

Showel does not use cookies or tracking technologies. The application functions entirely within your Jira instance using Atlassian's session management.

Children's Privacy

Showel is intended for use by businesses and development teams. We do not knowingly collect information from children under 13 years of age.

International Data Transfers

Data storage location is determined by your Atlassian instance's data residency settings. Showel itself does not transfer data internationally. Please refer to Atlassian's data residency documentation for more information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last updated" date at the top of this policy
• Posting a notice in the application
• For material changes, notifying you via your Jira instance

Continued use of Showel after changes constitutes acceptance of the updated policy.

Additional Privacy Resources

For more information about data privacy:

• Atlassian Privacy Policy: www.atlassian.com/legal/privacy-policy
• Atlassian Trust Center: www.atlassian.com/trust
• Forge Platform Security: developer.atlassian.com/platform/forge/security/

Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your information, please contact us at: