Data Processing Addendum
This addendum forms part of the EULA between you (the controller) and Synexco Digital, a sole proprietorship registered in Malaysia (Business Registration No. 202603052366 / SA0649630-T) (the processor) for Safety Net for Jira, where data protection law such as the EU or UK GDPR applies.
1. Processing details
| Subject matter | Recording changes and deletions in your Jira Cloud site so they can be undone or restored. |
|---|---|
| Duration | While Safety Net is installed, and up to the retention period you set (7–365 days); all data is deleted on uninstall. |
| Nature and purpose | Automated storage and processing inside Atlassian’s Forge platform to provide undo, recycle bin, history and alerts. |
| Personal data | Atlassian account ids; personal data contained in work items, comments and work logs you store in Jira. |
| Data subjects | Users of your Jira site and anyone mentioned in work item content. |
2. Our obligations
- Process personal data only on your documented instructions — the app’s functions and your settings.
- Ensure anyone authorised to process the data is bound by confidentiality.
- Apply appropriate technical and organisational measures (see Security): no external data egress, least-privilege access, per-user permission checks, encryption in transit and at rest by the platform, automatic deletion.
- Assist you with data subject requests and with security, breach notification and impact assessments, taking into account the nature of the processing.
- Notify you without undue delay after becoming aware of a personal data breach affecting your data.
- Delete the data at the end of the service — Atlassian deletes app storage on uninstall.
- Make available information needed to demonstrate compliance and allow for reasonable audits, primarily by providing this documentation and answering questionnaires.
3. Sub-processors
You authorise Atlassian (Forge hosting and storage; Atlassian Pty Ltd and affiliates) as sub-processor. We will give notice of new sub-processors by updating this page at least 30 days in advance; you may object by uninstalling.
4. Transfers
Safety Net’s data is stored in Atlassian’s infrastructure in your site’s data residency region. Where a transfer outside the EEA or UK occurs, the European Commission’s standard contractual clauses (module 2 or 3 as applicable) are incorporated by reference.