Privacy policy

Last updated: 13 November 2026. Contact: privacy@shipped-app.dev.

Summary

Shipped runs entirely on Atlassian's Forge platform. Your data is stored in Atlassian-hosted storage in the same data residency region as your Jira site and is never sent to servers we operate or to third parties.

Data Shipped processes

• Git metadata your CI sends: commit identifiers and parents, commit subjects, the first 2,000 characters of commit messages, commit dates, author display names (optional), tag names and dates, repository web URL, CI run URL. Never source code, diffs or email addresses.
• Jira data: keys, summaries, types, statuses, assignee display names and Fix Versions of issues referenced by commits, read through Atlassian APIs.
• Data you create in the app: releases, test states, notes, settings, and an audit log with the Atlassian account ID of the person making each change.

Storage and retention

Forge SQL and Forge storage, hosted by Atlassian. Raw uploads are deleted right after processing; the ingest log after 30 days. Release, test and audit data are kept while the app is installed. After uninstallation, Atlassian deletes app data according to its Forge data lifecycle.

Access

Users of your Jira site, subject to Jira permissions. Issue details are only shown to users who can browse the issue. We, the developers, have no access to your data.

Sub-processors

Atlassian (hosting, as the Forge platform provider). No others. No analytics or tracking.

This website

This site is hosted on GitHub Pages and sets no cookies. GitHub may log visitor IP addresses for security purposes.

Your rights

Because we hold no copy of your data, most requests are handled by your Jira administrator: export via CSV, or delete by deleting data in the app or uninstalling. For anything else, email us.