Privacy Policy

1. Introduction & Scope

Nordic ERP Integration Solutions AS ("we", "our", "us") respects your privacy. This Privacy Policy explains how our Atlassian Forge applications (Tripletex for Jira & Tempo, Visma Severa for Jira & Tempo, PowerOffice Go for Jira & Tempo) handle data when installed on your Atlassian Jira Cloud instance.

2. Architecture & Data Hosting (100% Atlassian Forge)

Our Apps are built natively on the Atlassian Forge platform and execute entirely inside Atlassian's managed serverless runtime:

• We do not operate external application servers, databases, or webhook proxy middleman services.
• Your company data, worklogs, and credentials never pass through or get stored on any servers owned or operated by us.

3. Categories of Data Processed

To synchronize worklogs and manage project mappings, the Apps process:

• Jira Account Identifiers: Atlassian Account ID, display name, and email address (used strictly for 1-click user mapping to ERP employee records).
• Issue Identifiers: Jira Issue Key, issue summary, and Epic links (used to resolve ERP project and activity mappings).
• Time Registration Data: Worklog duration, work date, description/comment, and author (pushed directly to your connected ERP system).
• ERP API Credentials: Tokens, client IDs, and client secrets entered in the Admin Settings (stored encrypted in Forge KVS).

4. Storage & Cryptography

All configuration settings and API credentials are encrypted at rest in Atlassian Forge Key-Value Storage (@forge/kvs). Outbound network requests are limited strictly to official ERP endpoints and api.tempo.io.

5. Data Subject Rights (GDPR)

Under the EU General Data Protection Regulation (GDPR), users have rights to access, rectify, and erase their personal data. Because data is stored within your Jira Cloud instance and ERP tenant, requests can be fulfilled directly by your Jira administrator or by contacting privacy@klarlink.io.