Skip to content
Support

Privacy Policy

What we collect, why, and how long we keep it.

Effective from: 24.Apr.2018
Last update: 14.Sep.2026
Previous versions: 25.Jan.2025: Privacy Policy, previous version of 25 January 2025

Introduction

DevAcrobats Ltd, UIC 131571959, is a company registered in the Commercial Register and Register of Non-profit Legal Entities of the Republic of Bulgaria, with registered address at 47A Cherni Vrah Blvd., floors 4–5, Puzl, 1407 Sofia, Bulgaria. In this Privacy Policy, “we”, “us”, and “our” refer to DevAcrobats Ltd. For privacy-related questions or requests, you can contact us at [email protected].

As an Atlassian Marketplace Partner, we provide Cloud and Data Center applications (“Apps”) available through the Atlassian Marketplace and designed to interoperate with Atlassian products.

We apply appropriate data protection, access control, and security measures to our Apps and the personal data we process.

We are committed to protecting your personal data through transparent practices and appropriate security measures. We recognize that privacy is an ongoing responsibility and may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or safeguards.

1. How we collect and process your personal data

1.1. What types of data we collect and where it comes from

1.1.1. Data collected or obtained about customers and users of our Apps

We obtain information about our customers and users primarily through Atlassian Marketplace licensing and evaluation information, support interactions, and limited App usage analytics:

a) Data Received After App Installation or Purchase: When you start a free trial or purchase any of our apps (Cloud or Data Center), Atlassian provides us with certain data linked to your Atlassian product license. This information may include:

  • Company details: Company name, country, and region.
  • Technical and billing contacts: Name, email, address, and phone number.
  • License details: License or entitlement ID (SEN), type and status, hosting type, user tier, and sales channel.
  • Solution Partner Information: Where applicable, the partner’s name and relevant business contact information.

b) Data from support or service inquiries

  • When you submit a request through our Service Management System or contact us by email, we receive personal data such as your name, email address, job title, and other information you choose to include in your request.
  • To investigate and resolve support issues, we may also ask you to provide relevant technical information, such as screenshots, configuration details, or logs.

c) Data processed during App usage

The data processed by an App depends on its functionality and hosting model.

  • For Cloud Apps with the “Runs on Atlassian” badge, customer App data is processed and stored within Atlassian-hosted infrastructure. DevAcrobats personnel do not have access to customer production App data stored in Forge-hosted storage.
  • For other Forge Apps, the types of data processed are described in the applicable App documentation. If an App allows or requires data egress outside Atlassian infrastructure, the relevant data and purpose of such egress will be stated in its documentation. If an App supports customer-selectable data residency, this will also be clearly indicated in its documentation.

d) App logs, analytics, and custom metrics

App analytics
We may collect limited App analytics to understand how our Apps are used and to improve their performance and functionality. Depending on the App, this may include:

  • Domain name or similar site identifier (no personal data, Jira issue content, or other customer production content is collected through App analytics).
  • Feature-specific usage statistics, such as the number of users, feature or metric type used, gadget usage, calculation modes, Jira display mode (dark or light), and similar product usage information.

App logs
To troubleshoot technical issues, diagnose errors, and maintain app security, our apps generate diagnostic logs during operation. These logs capture technical runtime events, error stack traces, HTTP status codes, and anonymized execution IDs. Log data is sanitized to exclude customer content and personal data and is retained only as long as necessary for debugging and operational support.

App custom metrics
We may collect technical and operational telemetry to monitor the health, availability, and performance of our apps. This includes aggregated system metrics such as feature execution times, gadget render latency, API response rates, and error frequencies. These metrics contain no customer content, Jira data, or Personally Identifiable Information (PII) and are used exclusively to detect outages, optimize speed, and ensure service reliability.

For Runs on Atlassian Apps, customers can control whether app logs, metrics, and analytics are shared with DevAcrobats through the applicable Atlassian administration settings.

e) Sensitive Personal Data: We do not request customers or users to provide sensitive personal data in connection with licensing, App analytics, or support. If such information is provided to us accidentally, we take reasonable steps to delete or remove it. If you become aware that sensitive personal data has been provided to us, please contact us at [email protected].

1.1.2. Data collected or obtained about prospects, job applicants, and other parties

  • Data provided by you through any of the following channels:
    • Email, phone, postal services, support system, social media profiles, etc.
    • Job applications submitted by email or through relevant platforms.
  • Data Received from Third Parties: Occasionally, we may receive personal data from third parties, which may include further details about your employer or industry. For instance, we may collect data from third-party websites like LinkedIn.

1.1.3. Data collected or obtained about visitors on our marketplace app listing pages

As an Atlassian Marketplace Partner, we maintain dedicated app listing pages on the Atlassian Marketplace. These pages are operated by Atlassian and are subject to Atlassian’s Privacy Policy and Cookies and Tracking Notice, available at:

Depending on your cookie preferences on the Atlassian Marketplace and the analytics functionality made available to Marketplace Partners, we may receive information about interactions with our app listing pages, such as page views, tab or link interactions, and other usage statistics. We use this information to understand the performance of our listings and improve how we present and promote our Apps.

We do not use this Marketplace analytics data to identify individual visitors or combine it with personal data we hold about prospects, customers, or users of our Apps.

1.1.4. Data collected or obtained about our website visitors at https://devacrobats.com/

We use cookies and similar technologies on our website to collect information such as cookie IDs, device and browser details, IP address, approximate location, operating system, and website usage information. We use this information to understand website performance and usage, improve our content and services, and protect the security of our website.

We process information necessary to operate and secure our website based on our legitimate interests. For non-essential cookies and similar technologies, including analytics and marketing technologies, we rely on your consent. You can manage or withdraw your consent at any time through our cookie management tool. You can also manage or block cookies through your browser settings.

Google Analytics and advertising

We use Google Analytics to understand how visitors interact with our website and to improve its performance and content. Where you consent to marketing cookies, we may also use Google Ads or similar advertising services to create audiences based on interactions with our website and show DevAcrobats advertisements to previous website visitors on third-party websites or platforms.

Third-party content

Our website may include links to or embedded content from third-party services, such as YouTube, LinkedIn, or other platforms. Where embedded content uses non-essential cookies or similar technologies, these are subject to your cookie preferences. When you interact with third-party content or follow a link to a third-party service, the provider may receive information about your interaction and process it in accordance with its own privacy policy.

In some cases, your IP address and browser information may be processed by security tools used on our website, for example, to detect or prevent unauthorized access. This information is used to protect the security of our website.

We do not use website analytics data to identify visitors or combine it with personal data we hold about prospects, customers, or users of our Apps.

1.1.5. Trust Center

Our Trust Center at trust.devacrobats.com is hosted for us by a service provider listed on our Subprocessors page. If you request access to restricted documents, we process the contact and organization details you provide, your acceptance of our Trust Center Non-Disclosure Agreement and a log of the documents you access, in order to assess your request, to form and evidence the agreement, and to protect our confidential information. If you subscribe to Trust Center updates, we process your email address to send them until you unsubscribe. We keep access records for as long as your confidentiality obligations continue and for [5] years afterwards.

1.1.6. Cookies and tracking technologies

Our Cookie Policy describes the cookies and tracking technologies used on our website, their purposes, and how you can accept or reject them. For more information, please see our Cookie Policy.

We process personal data where necessary to perform a contract with you or to take steps at your request before entering into a contract. This may include providing access to our Apps and related services, delivering technical support, administering subscriptions and licenses, and carrying out recruitment activities where you apply for a position with us.

We may process personal data where necessary for our legitimate interests or those of a third party, provided that these interests are not overridden by your rights and interests. These purposes may include:

  • Operating and improving our business and services: responding to inquiries, developing new functionality, maintaining and improving our Apps, and providing a better user experience.
  • Managing customer relationships and active trials: we may process personal data of customers, users, prospective customers, and their relevant employees, representatives, or technical and billing contacts to manage trials, subscriptions, licenses, onboarding, support, product communications, and feedback.
  • Statistical analysis and product development: analyzing usage trends and other information to improve our Apps, services, and customer experience. Where possible, we use aggregated or de-identified information for these purposes.
  • Communication and marketing: where permitted by applicable law, we may use business contact details to communicate about our services, including product and feature updates, license renewal reminders, pricing updates, and information about similar DevAcrobats products or services. Where consent is required by applicable law, we rely on consent instead. You may opt out of marketing communications at any time using the unsubscribe option provided in the communication or by contacting us.

Communications necessary for an active trial, subscription, or use of an App, such as onboarding information, support-related messages, important pricing or contractual notices, security notifications, and service updates, are not treated as optional communications.

  • Promoting user experiences and feedback: we may use feedback or use cases you provide to improve and promote our Apps. We will not publish your name, company name, or other identifying information for promotional purposes without your consent.
  • Security and prevention of misuse: protecting our systems, Apps, website, networks, and information against unauthorized access, fraud, malware, and other security threats.
  • Legal claims: establishing, exercising, or defending legal claims and protecting our legal rights.
  • Business administration: carrying out internal reporting, auditing, operational, and administrative activities.
  • Corporate transactions: evaluating or carrying out a merger, acquisition, sale, restructuring, or similar business transaction.

We process personal data where necessary to comply with applicable legal obligations, including:

  • tax, accounting, employment, and social-security requirements;
  • applicable regulatory and data protection requirements;
  • responding to lawful requests from courts, regulators, law-enforcement authorities, or other competent public authorities; and
  • responding to requests from data subjects and fulfilling our obligations under applicable data protection laws.

We rely on your consent where required for specific processing activities. This includes the use of non-essential cookies and similar technologies for analytics or marketing purposes, as described in our cookie settings.

We may also rely on your consent for activities such as publishing testimonials, customer success stories, or other promotional materials containing your personal or company information, and for marketing communications where consent is required by applicable law.

You may withdraw your consent at any time. For cookies and similar technologies, you can change your preferences through our cookie management tool. For marketing communications, you can use the unsubscribe option provided in the communication or contact us directly.

Withdrawal of consent does not affect the lawfulness of processing carried out before your consent is withdrawn.

1.3. Sharing information with third parties

We do not sell your personal data.

We may share personal data with vendors, subprocessors, and other service providers where necessary for them to provide services on our behalf, such as hosting, support, security, accounting, communications, and other business operations. These providers may process personal data only for the purposes for which we engage them and subject to applicable contractual and data protection requirements.

List of DevAcrobats subprocessors

We do not disclose customer, support, licensing, or other business contact data to third parties for their own marketing purposes. Where we use a service provider to send transactional or marketing communications on our behalf, that provider processes the data only for that purpose and does not use it for its own independent marketing.

We may also disclose personal data where:

  • you request or authorize it;
  • required by law, legal process, or a competent authority;
  • necessary to enforce our agreements or protect our rights, property, safety, or the rights and safety of others;
  • necessary to address disputes, claims, emergencies, or similar circumstances; or
  • required in connection with a merger, acquisition, sale, restructuring, or similar corporate transaction.

Third-party services integrated into or linked from our website, such as YouTube or LinkedIn, may receive information directly when you interact with them and may process it in accordance with their own privacy policies, as described in the section concerning website visitors.

1.4. Transferring personal data internationally

DevAcrobats is established in Bulgaria. In providing our Apps and operating our business, personal data may be processed by our service providers in countries outside the European Economic Area (EEA), including countries that may not provide the same level of data protection as the EEA.

For Apps with the “Runs on Atlassian” badge, the app data residency location aligns with that of the host Atlassian product. “Runs on Atlassian” Apps use Atlassian-hosted compute and storage and provide controls over external data egress.

Some DevAcrobats Apps may allow or require data egress outside Atlassian infrastructure. Where an App offers a customer-selectable data residency option, this will be clearly stated in the applicable App documentation, together with any relevant information about data egress.

Where personal data is transferred outside the EEA, we use transfer mechanisms permitted under applicable data protection law, as appropriate, including:

  • transfers to countries for which the European Commission has adopted an adequacy decision;
  • transfers to organizations in the United States participating in the EU-U.S. Data Privacy Framework; or
  • the European Commission’s Standard Contractual Clauses (SCCs), together with additional safeguards where required.

In exceptional circumstances, where an adequacy decision or appropriate safeguard is not available, we may rely on another transfer mechanism or derogation permitted by applicable data protection law, provided that the relevant legal requirements are met.

We require our service providers to protect personal data in accordance with applicable data protection requirements and enter into appropriate data processing and transfer agreements where required.

1.5. Data storage and retention

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse. However, no method of transmission or storage can be guaranteed to be completely secure.

1.5.1 App data

App data storage and retention may vary depending on the App and its hosting model. Please consult the applicable App documentation for details.

  • Runs on Atlassian Apps: For Apps with the “Runs on Atlassian” badge, App data is processed and stored entirely within Atlassian-hosted infrastructure. The App processes customer data only as necessary to provide its functionality and within the permissions granted to it. DevAcrobats does not host this data, and DevAcrobats personnel do not have access to customer production App data stored in Forge-hosted storage. Forge-hosted storage retains App data for 28 days after the App is uninstalled, after which it is deleted in accordance with Atlassian’s applicable retention processes.
  • Other Forge Apps: Where a Forge App stores customer or tenant data outside Atlassian infrastructure, such data is deleted or anonymized within a maximum of 90 days after App uninstallation or subscription termination, unless longer retention is required by applicable law.
  • Data Center Apps: For our Data Center Apps, App data is stored and managed within the customer’s own Data Center environment and is not hosted by DevAcrobats. Customers are responsible for securing their infrastructure, databases, access controls, and network communications.

1.5.2 Support data

We retain customer support requests for as long as reasonably necessary to provide support, maintain historical context, investigate recurring technical issues or regressions, preserve technical knowledge that may assist with future requests or documentation, manage customer service escalations or SLA-related reviews, and establish, exercise, or defend legal claims or enforce agreements.

We periodically review support data and may delete, de-identify, or anonymize personal data where ongoing identification is no longer necessary. Requests from individuals to delete their personal information are processed in accordance with applicable data protection legislation. Where possible, we may retain the non-identifiable technical content of a record after personal identifiers have been removed, to preserve support history and technical knowledge. Requests from customer organizations to delete support records or communication history are evaluated against applicable contractual, operational, and legal requirements.

1.5.3 Website cookies and tracking technologies

Retention periods vary depending on the cookie or technology used. Details of the cookies and similar technologies currently used on our website, including their purposes and expiration periods, are available through our cookie management tool on devacrobats.com.

1.5.4 Employee data

Employee and employment-related data is retained for the periods required by applicable Bulgarian employment, tax, accounting, social-security, and other legal requirements, and for any additional period necessary to establish, exercise, or defend legal claims.

1.6. Children’s data

Our services are not intended for use by children. We do not knowingly collect or process personal data of children. If we become aware that we have collected or processed such data, we will take reasonable steps to delete it without undue delay.

2. Your rights regarding the data we collect and process

The GDPR and other applicable privacy laws may provide you with certain rights regarding your personal data. Depending on the law that applies to you, these rights may vary. Under the GDPR, they include the following:

2.1. Right of Access

You have the right to request confirmation as to whether we process personal data about you and to obtain a copy of that data, together with information about the purposes of processing, categories of personal data, recipients, retention periods, the source of the data where it was not obtained directly from you, and the rights available to you.

We will respond to your request without undue delay and generally within one month. This period may be extended by up to two additional months where necessary due to the complexity or number of requests, in which case we will inform you of the extension. Requests are generally handled free of charge, subject to the exceptions permitted by applicable law.

2.2. Right to Rectification

You have the right to request the correction of inaccurate personal data and, where applicable, to have incomplete personal data completed.

2.3. Right to Erasure (“Right to be Forgotten”)

You have the right to request the deletion of your personal data in certain circumstances, including:

  • when the data is no longer necessary for the purposes for which it was collected;
  • when you withdraw your consent, and there is no other legal basis for processing;
  • when you successfully object to the processing;
  • when the data has been unlawfully processed; or
  • when deletion is required to comply with a legal obligation.

The right to erasure is not absolute. We may retain personal data where processing remains necessary, for example, to comply with a legal obligation or to establish, exercise, or defend legal claims.

2.4. Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances, including:

  • while we verify the accuracy of personal data you contest;
  • where processing is unlawful but you prefer restriction instead of deletion;
  • where we no longer need the data, but you require it to establish, exercise, or defend legal claims; or
  • while we assess an objection you have made to processing based on legitimate interests.

Where personal data has been corrected, erased, or its processing restricted, we will communicate this to recipients to whom the data has been disclosed, unless this is impossible or involves disproportionate effort.

2.5. Right to Data Portability

Where personal data you have provided to us is processed by automated means based on your consent or a contract with you, you have the right to receive that data in a structured, commonly used, and machine-readable format and to transmit it to another controller. Where technically feasible, you may also request that we transmit the data directly to another controller.

2.6. Right to Object to Processing Based on Legitimate Interests

Where we process your personal data based on our legitimate interests, you have the right to object at any time on grounds relating to your particular situation.

If you object, we will cease the relevant processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary to establish, exercise, or defend legal claims.

2.7. Right to Object to Direct Marketing

We may use your business contact information, where permitted by applicable law, to send information about our Apps and related DevAcrobats products or services that may be relevant to you, including information about new Apps, features, or events.

You have the right to object at any time to the processing of your personal data for direct marketing purposes. If you object, we will stop using your personal data for such purposes. You can opt out at any time by following the unsubscribe instructions in a marketing communication, contacting us directly, or submitting a request through our service management system.

Your objection to marketing communications does not affect essential service communications relating to an active trial, subscription, security, contractual matters, or operation of our Apps.

Where we rely on your consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

For cookies and similar technologies, you can change your preferences through our cookie management tool. For marketing communications, you can use the unsubscribe option provided in the communication or contact us directly.

2.9. Rights Relating to Automated Decision-Making and Profiling

You have the right, in certain circumstances, not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

DevAcrobats does not currently use solely automated processing, including profiling, to make decisions about individuals that produce legal or similarly significant effects.

2.10. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

In Bulgaria, where DevAcrobats Ltd. is established, the supervisory body is the Commission for Personal Data Protection.

Commission for Personal Data Protection
2, Prof. Tsvetan Lazarov Blvd.
Sofia 1592, Bulgaria
e-mail: [email protected]
Website: https://cpdp.bg/

3. Questions, concerns or complaints

If you have questions, concerns, complaints, or would like to exercise your data protection rights, please contact us at:

DevAcrobats Ltd.
Postal Address: 47 Cherni Vrah Blvd., floor 6, 1407 Sofia, Bulgaria
Email: [email protected]

We respond to requests relating to your data protection rights without undue delay and generally within one month of receipt. Where permitted by applicable law, this period may be extended for complex or numerous requests, in which case we will inform you accordingly.

4. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our data practices, services, legal requirements, or privacy and security measures.

Any changes will be published on our website together with the updated effective or revision date. Where changes are significant, we may provide additional notice through our website or other appropriate communication channels.

We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your personal data.

Back to Legal