Forge App Privacy Policy

Last Updated: March 14, 2026

Overview

This Privacy Policy applies to the Forge applications published by Flight Crew Consulting for the Atlassian platform (each, “the App”). It describes how our Apps handle data. Where an individual App collects, processes, or stores data differently than described here, an App-specific addendum or supplemental notice will be provided.

Data Collection

Our Apps do not collect, store, or transmit personally identifiable information (PII) except where strictly required for the App to function, and only as disclosed in this policy or an App-specific notice.

Depending on the App, the only data stored may include:

  • License key hash — A SHA-256 hash of the license key entered by the user, stored in Forge App Storage (scoped to your Atlassian site). The plaintext license key is never stored.
  • App configuration and settings — Any preferences or configuration values you provide, stored in Forge App Storage scoped to your site.

Data Processing

Our Apps perform actions within your Atlassian environment using the Atlassian APIs. All API calls are made on behalf of the authenticated user via Forge’s api.asUser() mechanism, or, where an App requires it, via api.asApp() as disclosed in that App’s permissions and supplemental notice.

Unless explicitly stated in an App-specific notice, our Apps do not:

  • Access or read your data beyond what is required to perform the requested action
  • Export or transmit any data outside your Atlassian environment
  • Use cookies or tracking technologies
  • Share data with third parties

Data Storage

All data remains within your Atlassian cloud environment. Our Apps use Forge App Storage, which is managed by Atlassian and scoped to your site. No data is stored on Flight Crew Consulting servers.

Permissions

Each App requests only the Atlassian scopes required for its functionality. The specific scopes requested, and the purpose of each, are presented to you at installation and are listed in that App’s listing on the Atlassian Marketplace and/or its App-specific documentation.

In general, our Apps follow the principle of least privilege: read scopes are used to display or validate existing data, and write scopes are used only to perform the actions you initiate within the App.

Data Retention

Data stored in Forge App Storage (such as license key hashes and configuration values) persists until the App is uninstalled. Uninstalling an App removes all data it has stored in Forge App Storage.

Any content created or modified in your Atlassian environment through use of an App (for example, configuration, objects, or records) remains in your environment and is not affected by uninstalling the App.

Contact

For privacy questions or concerns, contact Flight Crew Consulting: