1. Overview

Okapya Software Solutions inc. (“We”, “Okapya”) takes security management seriously and as such only relies on secured and reliable infrastructures. Checklist for JIRA Cloud (the “Software”) is hosted on Heroku (a Salesforce company), a proven Platform as a Service (PaaS) provider.

2. Data storage

Checklist's specific data is stored on Heroku Postgress. No data about issues, projects or users are stored except for their associated IDs so that Checklist can know its relationship to them. All data is backed up daily and backups are retained for seven days. Security of hosted data is provided by our hosting provider which applies security best practices. Details about security measures put in place by Heroku are available here.

3. Facilities

Heroku's servers running Checklist for JIRA are hosted in the US Region.

4. People and access

Our support team maintains an account on all cloud systems and applications for the purposes of maintenance and support. This support team accesses hosted applications and data only for purposes of application health monitoring and performing system or application maintenance, and upon customer request via our support system. Within Okapya, only authorized employees have access to application data.

5. Personal Data

We do not collect personal data from our customers other than identification numbers associated with their Atlassian Account. We collect usage data on an anonymous basis.

We do not use personal data except as necessary to identify our customers, provide our services, respond to technical issues, provide support and analyze (on an aggregated and anonymous basis) the use of our services.

The Software is not meant to process personal data, but we may host personal data on behalf of our customers if they choose to upload personal data to the Software. Processing of personal data hosted on the Software is performed by our customers. We process such data only on the instructions of our customers or if required by law.

We do not disclose personal data to any third-party, except when authorized by our customers or if required by law.

6. Data Subject Rights

Depending on your place of residence, you may be entitled to exercise rights provided by applicable law. In most cases, such exercise shall be directed at our customers.