We do not receive your data. The app moves directory records from your Microsoft tenant into your own Jira Assets, and both ends belong to you.
Whatever attributes your administrator ticks. That can include names, email addresses, job titles, departments, office locations and phone numbers — personal data about your staff. The list is yours to choose and yours to shorten, and the app asks Microsoft only for the attributes on it.
You are the controller of that data. We are a processor, and only for the moments it is in flight. Microsoft and Atlassian are your own providers under your own agreements with them.
Nothing of yours reaches us. We hold no copy of your directory and have no database that could hold one. Settings, run logs and the client secret all live inside your own Atlassian site, the secret in Forge's encrypted secret store.
There are no others. We add none without updating this page first.
Uninstalling the app removes its settings and run logs with it. Assets objects already created stay in your site, because they are yours; delete them in Assets if you want them gone. Revoking the app's access in Microsoft Entra stops any further reading immediately.