Legal

Privacy policy

How Flow Guard processes information when installed in Jira Cloud, and what this website collects. It covers Flow Guard only, not Atlassian products or other apps.

The app, in your Jira site

Data processed

Flow Guard processes selected Jira project and issue identifiers, workflow status, configured dates, priority, sprint and release indicators, link-derived counts, calculated signals and intervention metadata. It does not retain issue summaries, user display names, Jira comment bodies, assignee account IDs or free-text dismissal reasons in risk records.

An Atlassian account ID is stored only when a user opts in to a digest, and can be present temporarily in the Forge Async Event that delivers it.

Purpose and hosting

Data is used to detect, rank, display and administer delivery-risk records, perform explicit Jira actions, deliver opt-in digests and report coverage-qualified outcomes. The app uses Atlassian Forge compute and hosted storage, and declares no app-specific external remote or data egress.

Access and sharing

Flow Guard rechecks Jira permissions and issue security for every viewer and every action. Data is processed by Atlassian and its subprocessors under the applicable Atlassian terms. The app sends no end user data to any analytics, advertising or third-party service.

Retention and deletion

Scheduled cleanup pauses while the paid product license is inactive. Administrator deletion remains available. Pre-uninstall cleanup is best effort, and Atlassian may retain remaining Forge Hosted Storage for up to 28 days.

Your choices

Users can disable their digest subscriptions. Jira administrators can export retained Flow Guard risk records and permanently delete app storage. The export is not represented as a complete data-subject access response. Account lifecycle requests received from Atlassian are acted on through Forge's personal-data reporting process.

This website

Separately from the app, flow-guard.7thcode.app uses Google Analytics 4 to count page visits. Nothing is stored in your browser until you accept. On your first visit everything is set to denied and you are asked; if you decline, no cookies are written and no visit is recorded, and the choice is remembered so you are not asked again.

If you accept, Google Analytics stores cookies and sends your IP address, the page you viewed and browser details to Google. Google Signals is enabled on the property, so some of that traffic also reaches Google's advertising domain. Before you answer, a single request without cookies or identifiers is still made to Google.

This is a marketing and documentation website. No Jira data is involved — the app statement above is unaffected. To change your answer later, clear this site's stored data in your browser; you can also use Google's opt-out browser add-on.

Contact and changes

For privacy enquiries email support@7thcode.app with Flow Guard privacy in the subject. Do not include credentials, Jira account IDs or confidential issue content. Material changes to this policy will be dated and communicated through this documentation and the Marketplace listing.