Comment VaultPrivacy policy
Last updated: 27 October 2026
This policy explains how Comment Vault for Jira (the “App”), published by EDEV, SIRET 92002117700018, 6 rue sane 28200 (“we”), handles data.
1. Data processed by the App inside your Atlassian cloud
The App runs entirely on Atlassian Forge (“Runs on Atlassian”). To provide comment history, it stores, in your own Forge storage hosted by Atlassian:
| Data | Purpose |
|---|---|
| Content of each version of a comment (rich text and plain text) | Display previous versions and deleted comments |
| Comment, work item and project identifiers, work item key | Link each version to its comment |
| Atlassian account IDs of the author, editor or deleter | Show who made each change |
| Timestamps and visibility restriction labels | Order versions and apply Jira permissions before display |
| App settings (retention, visibility mode) | Configure the App |
The App does not store names, e-mail addresses or other profile data: names and avatars are displayed by Atlassian's own components at viewing time.
This data never leaves Atlassian's infrastructure. The App has no external server, uses no third-party service and contains no analytics or tracking. We cannot access this data. You (the customer) remain the controller of your Jira content; Atlassian hosts it under its own terms and policies.
2. Retention and deletion
- Your Jira administrators choose how long history is kept (30 days to forever). Older versions are deleted automatically.
- Administrators can erase all stored history at any time from the App's admin page.
- When the App is uninstalled, its data is deleted by Atlassian according to the Forge data deletion policy.
3. Data we receive as the publisher
For licensing and support, Atlassian shares with us your organisation's license details (company name, technical and billing contacts). When you contact support, we process your e-mail and the information you send. We use this data only to manage your license and answer your requests (legal basis: performance of contract and legitimate interest), keep it for the duration of the license plus the period required by law, and never sell it.
4. Your rights
Under the GDPR you can request access, rectification, erasure, restriction or portability of personal data we hold, and object to its processing, by writing to contact@morglaz.com. You may also lodge a complaint with the CNIL (www.cnil.fr). Requests about Jira content stored by the App should go to your Jira administrator, who can delete it directly.
5. Security
The App relies on Atlassian Forge isolation, uses the viewer's live Jira permissions before showing any content, and binds all database parameters. Report vulnerabilities to contact@morglaz.com.
6. Changes
We will update this page if our practices change and indicate the date of the last update above.