...
| Mode | Product | Status | Atlassian-collected end-user data (1) | Vendor-collected end-user data (1) | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Data containing PII(3) | Other collected data, in normal usage | Data when submitting a support request through the app | Server|||||||||
| Cloud | Requirement Yogi | Paid | None | Application data(2) (the requirements, page IDs, page titles, Jira issues) | |||||||
| Cloud | Requirement Yogi for Jira | Paid | None | Application data(2) (the requirements text, page IDs, page titles, Jira issues) | |||||||
| Server / DC | Requirement Yogi | Paid | The license information | None | None | None since 2.2.5(5). | |||||
| Server / DC | Requirement Yogi for Jira | Free | NoneNone | None | None | ||||||
| Server / DC | RY Testing & Compliance | Paid | The license information | NoneNone | None | ||||||
| Server / DC | PSEA - Play SQL Export Add-on | Free | NoneNone | None | None | ||||||
| Server / DC | SEO Manager | Free | None | None | None | None | |||||
| Server / DC | Play SQL Base | Free | None | None since 3.1.2(4) | None | ||||||
| Server / DC | Play SQL Spreadsheets | Free | None | None since 3.1.2(4(5). | Server | Play SQL Spreadsheets | Paid | The license information | Same as Play SQL Base | None | Same as Play SQL Base |
| Server / DC | Play SQL Forms | Free | NoneNone | None | None | ||||||
| Server / DC | ReqIF extension for Requirement Yogi | Free | None | None | None | None | |||||
| Cloud apps | Cloud | Play SQL Spreadsheets | Paid | The license information | None | Application data(2)||||||
(
...
Application data(2) (SQL queries, connection tokens to the database).
...
Application data(2) (HTML and Javascript).
...
(1) As defined in Atlassian Marketplace Publisher Agreement, section §8.4.
(2) Free data text may contain PII if users have entered someany.
(3) PII: Personally identifiable information (user names, email, phone number, etc).
(4) There used to be a feedback job in Play SQL Base and Play SQL Spreadsheets. This feedback job was removed in version 3.1.2 (see the history of this page).
(5) It used to be possible to submit support requests through the app. This feature was removed in October 2019 (see the history of this page).
What other data is collected?
- We have Google Analytics on some of our websites.
- Google collects data about page views which is returned in a form that is not personally identifiable to us, notably aggregated by location, age, gender or demographic factors.
- We do not engage in remarketing.
- We have NOT enabled Advertising features in Google Analytics.
- We have mailing-lists, managed by MailChimp. Users can opt-in, out-out and manage their subscription by clicking on the link in emails.
- Users can get support through a Jira Cloud website, which is under Atlassian's privacy policy.
- Users can get support by email, in which case we manage our emails through FastMail.
How we share information we collect
Play SQL Requirement Yogi is currently a sole-trader company (company type "SASU" in France) with:
...
| License information | License information is provided to us by Atlassian every time we need it. If Atlassian starts limiting the history, then we will store it for up to 2 years, mainly for accounting purposes. |
|---|---|
| User-created data in our Cloud apps | We delete data from the active databases as soon as the addon is uninstalled. We keep a backup of customer data for up to 2 months. |
Our providers, where we keep information and how it is transferred internationally
Our products are generally hosted by Amazon AWS and Digital Ocean, except our website which is managed by OVH, France. The computers we use to create software and access your information are located in France.
| Type | Product | Where it is hosted | Link | Data Processing Addenum | ||||
|---|---|---|---|---|---|---|---|---|
| Cloud products | Play SQL Spreadsheets | Digital Ocean, Amsterdam, NetherlandsRequirement Yogi | Amazon AWS | https:// | wwwaws. | digitaloceanamazon.com/ | legalservice-terms/ |  Part 1.14 of their ToS |
| Cloud | SQL Connector | Digital Ocean, Amsterdam, Netherlands | ||||||
| Cloud | CYO Create Your Own | Digital Ocean, Amsterdam, Netherlands | ||||||
| Cloud | Backups for cloud products | Digital Ocean, Amsterdam, Netherlands | ||||||
| Web | Our website | OVH, France | https://www.ovh.com/fr/protection-donnees-personnelles/ | Part 2 of their ToS | ||||
| Mailing lists | All | MailChimp, USA | ||||||
| Fastmail | Fastmail, Australia / USA. | https://www.fastmail.com/help/ourservice/security.html | ||||||
| Documents | Encrypted backups of our administrative documents, invoices, work documents. | SpiderOak, USA | https://spideroak.support/hc/en-us/articles/360002173891-GDPR-and-SpiderOak | |||||
| Desktop | Our computers, our company, etc. | Encrypted laptops, desktops and hard drives, France. | - |
...
- Concerning the "feedback job" of Play SQL Spreadsheets, you can disable it in the "Privacy Policy" tab of your add-on,
- Concerning the data that is sent for support cases, you are notified and you can send an email manually to us,
- Concerning the free data that you create in the Cloud apps, you can edit it in the application.
- Concerning backups, our Cloud products contain a "Backup" page which can be used to export your data.
Requirement Yogi Cloud (Confluence and Jira): Specific information
Accurate on February 15th, 2022:
- The app is deployed on Amazon AWS,
- This app is integrated with Atlassian using the Atlassian Connect Spring Boot framework. It is not an Atlassian Forge product. It means, when the user interacts with Atlassian Confluence and Jira where the app is installed, Atlassian notifies the app of changes, the app downloads the relevant information, extracts the necessary information and stores it in AWS.
- The app is deployed in EC2 in the AWS Region eu-west-1 (Ireland),
- The data is stored in AWS RDS Aurora Postgres, with encryption enabled, in the same AWS Region.
- The network allowing access to the database is a private subnet, and there is no direct route from the worldwide internet to the database itself,
- The logs are stored in AWS CloudWatch using the default encryption,
- The change events are stored in AWS CloudTrail,
- Employees under confidentiality agreement can access the live data in the database, the live servers, and the backups.
This information is subject to change in case of architectural change: if we decide to migrate the app to another provider, or if we decide to change databases inside of AWS, or if we decide to add/remove availability zones, or if we decide of another architecture. In any case, we will ensure that the data is encrypted at rest.
Contact
If any process is not automated or you do not know how to exercise your rights, you may exercise them by contacting Adrien Ragot at:
| gdpr@playgdpr@r-sqlyogi.com | |
Play SQL Requirement Yogi - Responsable Responsable GDPR 77 rue Maurice Flandin 69003 Lyon 535 route des Lucioles Les Aqueducs B3 06560 Sophia Antipolis France |
How we update this policy
We may update this policy without notice, for the purposes of being more specific, reflecting a new practice or complying to legal requirements.
Change log:
- February 15th, 2022: Added Amazon AWS and Requirement Yogi Cloud, and removed cloud products which have been shut down. Added a specific section for Requirement Yogi Cloud.
- October 2nd, 2019: Added SpiderOak for our backups; Reflected the removal of support-requests-through-the-app features.
- January 29th, 2019: Rewrite, to comply with Atlassian's request for updated policies, to have one policy for all products, to be specific on the location of your data, and to reflect up-to-date information.
- September 11th, 2015: Add sections "What data we have", "Who accesses the data", "How we keep our servers secure", "How you can opt out" - see page history.
- November 11th, 2013: Rewrite, to go from generic statements to specific ones.
- October 2nd, 2013: Original version.
...