Privacy Policy

Summary

• CapRadar runs entirely on Atlassian Forge. Its data is stored in Atlassian Forge hosted storage and never leaves Atlassian.
• Radrly receives no customer data, and the app sends no telemetry.
• The customer is the controller; Radrly is the processor; Atlassian is the only sub-processor.

Who we are

CapRadar is developed and operated by Radrly Sp. z o.o., Poland (registered office: ul. Tarczyńska 68, 05-831 Krakowiany, Poland; KRS 0001215510, NIP 5342706013, REGON 543658680) (“Radrly”, “we”). This policy covers the CapRadar app. “Customer” means the organisation that installs CapRadar on its Atlassian Cloud site. “Users” means the people on the Customer's site.

Data we process

CapRadar stores:

• Atlassian account IDs, linked to an internal random person key
• worklog metadata (work item, start time, duration) and the work item fields used by rules and allocation, including status and assignee intervals
• absence dates and type codes, cost centres, departments, legal entities and team shares that you enter or import
• rates you enter or import, non-labour cost lines, plans, policies, rules, phases, overrides and their reasons
• period states, approvals, attestations, snapshots, hashes, the audit trail, export logs and Rovo drafts

Not stored: Worklog comments, work item summaries and descriptions, comments, attachments, email addresses and display names. Summaries used for R&D evidence are read with the caller's permissions when requested and not stored.

We do not use this data for advertising, profiling or sale, and we do not combine it with other data.

Where data is stored

All CapRadar data is stored in Atlassian Forge hosted storage on Atlassian's infrastructure. It follows the data residency location of the Customer's site. Radrly runs no servers that hold customer data.

No egress, no sub-processors

CapRadar declares no remote hosts, uses no Forge Remote and no Connect, and calls no external APIs. We do not share data with third parties. Atlassian provides the hosting platform under its own terms and, for GDPR purposes, is a sub-processor. Other than Atlassian, we use no sub-processors.

AI

CapRadar does not send data to any external AI service. The optional Rovo agent (Advanced) runs in Atlassian Rovo and reads CapRadar data through Forge actions inside Atlassian.

Writes to Atlassian products

CapRadar makes no writes to Jira content. All classifications and results are stored in CapRadar's own Forge storage.

Permissions (scopes)

The scopes CapRadar requests are listed on the Security page and shown when the app is installed.

Retention and deletion

Locked snapshots are kept while the app is installed. In the Advanced edition an administrator sets retention; many accounting regimes expect records to be kept for several years, so check your own requirements. Standard keeps audit trail detail beyond snapshots for 90 days.

Personal data reporting: the app reports stored Atlassian account IDs to Atlassian's personal data reporting API. When Atlassian reports an account as closed, CapRadar removes or pseudonymises that account ID.

After uninstall: the Forge platform deletes the app's data according to Atlassian's policy for Forge hosted storage. Radrly keeps no copy.

Logs

The app writes operational status and error messages, without personal data, to the Forge developer console. Logs stay in Atlassian's environment.

GDPR

Roles. For personal data in CapRadar, the Customer is the controller and Radrly is a processor acting on the Customer's documented instructions. A Data Processing Agreement is available.

Your rights. If your data is in a Customer's CapRadar, you have rights of access, rectification, erasure, restriction, portability and objection under the GDPR. Please contact the organisation that runs your site first. We will support the Customer in answering such requests. You can also complain to a supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).

International transfers

Radrly does not transfer data itself. Data is hosted by Atlassian in the location set by the Customer's data residency choice, and Atlassian's own transfer mechanisms apply.

CCPA

Radrly does not sell personal information.

This website

This site is static. It uses no cookies, no analytics, no trackers and no third-party scripts, fonts or CDNs. Our web server keeps standard access logs (IP address, time, requested page) for security and operations for a short period.

Changes

We will update this page when the app's data handling changes and show the date at the top. For material changes we will notify customers, for example through Atlassian Marketplace.

Contact

Privacy questions and data requests: marcin@radrly.com.