Data Security and Privacy Statement

Privacy

Data Security & Privacy Statement

excentia is an Atlassian Partner since 2009. This page summarises how EXCENTIA CONSULTORIA S.L. stores, protects and manages customer data for its Atlassian Cloud add-ons.

Overview

excentia is a passionate Atlassian Partner since 2009 with deep knowledge in Atlassian plugin development. The aim of this documentation is to cover all of relevant information about the Data Security & Privacy Statement of EXCENTIA CONSULTORIA S.L. to help our customer see clearly what we do and what we really don't with their data.

At a glance

AREA	SUMMARY
Data stored	Only the unique ID number of Atlassian Cloud products and a revocable SonarQube token.
Personal information	We do not store personal information such as names, email addresses or postal addresses.
Location	Data is stored on a private server located in France.
Backups	Backups are securely stored, created at least daily and retained for at least one month.
Retention	Account information is retained for 30 days after uninstalling the add-on, then permanently deleted.
Security contact	Vulnerabilities or security concerns can be reported to security@excentia.es.

Data storage terms and data storage location

This section explains where our application stores customer data and where the data is physically stored to comply with local laws.

Storage principle: we only store the minimum data required to operate the add-on.

excentia uses a private server located in France.
We do not store personal information such as name, email or address.
We store only the unique ID number of your Atlassian Cloud products.
excentia does not store user passwords for Atlassian Cloud products, including in databases or files.
excentia stores a password token created on the SonarQube server that can be revoked by the user at any time.
Please read the product documentation for further details.

Backups

This section explains our backup and recovery policy for customer data.

Backup data is securely stored; unauthorised access to backup data is not possible.
We back up at least once a day, and we keep backups for at least one month.
Please read the product documentation for further details.

Account removal and data retention

This section explains how a customer can close an account and completely remove their data from our service.

Customer accounts may be removed at any time by uninstalling the add-on from the Cloud product.
Customer account information is retained by excentia for 30 days. After this period, account information is unrecoverably deleted.
Please read the product documentation for further details.

Application and infrastructure security

This section explains what security measures we have taken in our application and infrastructure.

The excentia support team accesses add-on data only for application health monitoring, system or application maintenance, and customer-requested support.
Only authorised excentia employees have access to server data.
Customers are responsible for maintaining the security of their own Confluence and Jira Cloud login information.
Communication between Cloud products and the add-on server is done using web requests. All web requests are digitally signed, authenticated and authorised.
The add-on server is only accessible through secure protocols such as HTTPS.
Please read the product documentation for further details.

Security disclosure

This section explains how and under what circumstances we notify customers about security breaches or vulnerabilities, and how users or security researchers should disclose vulnerabilities found in our add-on.

Security breaches or vulnerabilities, together with the proposed solution, are published on our website.
Customers can report security breaches or vulnerabilities using the security@excentia.es email address.
Please read the product documentation for further details.

Privacy

Data collected during the use of our add-on will not be shared with third parties except where required by law.