Privacy policy: Lockstep - Version & Component Sync for Jira
DRAFT. Written from how the app works, not by a lawyer. Confirm the 12-month retention period and the statement about the e-mail provider, and have it reviewed before publishing.
Provider: Martin Patrovič, D. Jurkoviča 7, 955 03 Topoľčany, Slovakia, company ID (IČO) 57182523, martin@lunvio.sk ("we").
Last updated: 12 November 2026
Summary
Lockstep - Version & Component Sync for Jira ("the app") runs entirely on Atlassian's Forge platform. It does not send any data to our servers or to any third party. We cannot see the data in your Jira site.
What the app stores
The app stores the following in Atlassian-hosted Forge storage, inside your Atlassian site's data region:
| Data | Purpose |
|---|---|
| Sync rules: IDs of the source and target projects and the chosen options | To know what to sync |
| Matched pairs: IDs of versions and components in the source and their copies | To follow renames |
| Activity log: the last 100 actions with time, project IDs, the name of the version or component, the result and any error message from Jira | To let administrators see what happened |
The app does not store user names, e-mail addresses, account IDs, issue content or attachments.
What the app reads
To do its work the app reads the list of projects and the versions and components of the projects named in your rules. When an administrator opens the settings, the app asks Jira whether that person is a Jira administrator. The answer is used once and is not stored.
Sharing and transfers
The app makes no network connections outside Atlassian. We use no sub-processors for the app. Atlassian processes the data as the platform provider under your agreement with Atlassian.
Retention and deletion
Sync rules and matched pairs are kept until an administrator removes the rule. The activity log keeps only the last 100 entries. When the app is uninstalled, Atlassian deletes the app's stored data according to its Forge data-retention rules.
Support requests
If you contact our support, we process the information you send us (such as your name, e-mail address and the content of your message) to answer you. We keep it for 12 months after the request is closed and store it in our e-mail mailbox, hosted by Google Workspace (Google Ireland Limited). Google may process this data outside the European Union under its standard contractual safeguards.
Your rights
Under the GDPR you may ask us for access to, correction or deletion of personal data we hold about you, and you may complain to a supervisory authority. For data stored inside your Jira site, contact your site administrator, who controls it.
Changes
We will publish changes to this policy on this page and update the date above.