Privacy Policy for TrueTime for Jira

This document covers TrueTime for Jira by Infralicious.

Effective date: October 11, 2026 Last updated: 2026-10-18

TrueTime for Jira (“TrueTime”, “we”, “us”) is built by Infralicious. Contact: use the contact form.

What Data We Collect

Time tracking data stays in Jira. When you log time with TrueTime, we create native Jira worklogs. Your time entries, comments, and issue associations live in your Jira instance, not on our servers. If you uninstall TrueTime, every hour you ever logged stays in Jira.

What TrueTime stores (in Atlassian Forge Storage, on Atlassian infrastructure):

  • Running timer state (issue key, start time) - so timers survive tab close
  • App preferences (week start day, branding, auto-timer config, approver lists)
  • Team definitions and memberships
  • Approval records (submitted weeks, decisions)
  • Custom attribute definitions
  • Cached reference data (temporary)

What TrueTime does NOT collect:

  • No analytics, no tracking pixels, no cookies for advertising
  • No personal data beyond what Jira already provides (display name, email for approver lists)
  • No data is sent to any server outside Atlassian infrastructure

Where Data Is Stored

All data is stored on Atlassian infrastructure via Forge Storage and Forge KVS. No TrueTime data leaves Atlassian’s systems. We operate no separate database.

Data Retention

  • Timer state: deleted when the timer stops or after 24 hours of inactivity
  • Preferences: retained until you change them or uninstall the app
  • On uninstall: all Forge Storage data is deleted by Atlassian automatically

Your Rights (GDPR/CCPA)

  • Access: All your data is visible in the app’s settings and in Jira
  • Deletion: Uninstall the app to delete all stored preferences. Delete Jira worklogs directly in Jira.
  • Portability: Export your time data as CSV/Excel from the Reports tab at any time
  • No sale: We do not sell, share, or disclose your data to third parties

Third Parties

TrueTime integrates only with your Jira instance via Atlassian’s Forge platform. We use no third-party analytics, advertising, or data processing services.

Security

TrueTime runs entirely within Atlassian’s Forge sandbox. We inherit Atlassian’s security certifications (SOC 2, ISO 27001). All API calls use Atlassian’s authenticated Forge bridge - no credentials are stored by TrueTime.

Changes

We will update this policy when our data practices change. Material changes will be announced via the Atlassian Marketplace listing.

Contact

For privacy questions or data requests, use the contact form.

This page alone states the full policy for TrueTime.