--- title: "Graphy - Security and Privacy" canonical: "https://helpcenter.mindproapps.com/space/MG/2276196477/Graphy%20-%20Security%20and%20Privacy" format: markdown --- > ℹ️ **Summary: **In addition to the information available in our [Company Privacy Policy](https://mindproapps.com/privacy-policy/), our [Company Security Measures](https://mindproapps.com/security-measures/), and the details provided on the [Marketplace Privacy & Security Tab](https://marketplace.atlassian.com/apps/1233264/graphy-custom-charts-itsm-reports-dashboards-jsm-rovo?hosting=cloud&tab=privacy-and-security), this page provides an overview of how this app accesses, manages, and protects your data, security, and privacy. ### **Data & Security Statement** | ##### **Question** | ##### **Answer** | | --- | --- | | What data permission does the app require to work with my Atlassian Products? | Mindpro Graphy integrates with your Atlassian product and requires the permissions below:
- View application roles. - View audit logs. - View system and custom avatars.
Read the board configuration, features, properties, related projects, filters, and quick filters.
- View issue comments. - Read field configurations. - View field default values. - View field options. - View fields. - View user groups. - View issue details. - View issue meta. - View issue security levels. - View issue statuses. - Read issue type hierarchies. - View issue types. - View issue changelogs. - View issue votes. - View issue watchers. - View issues.
Read Jira project and issue data, search for issues, and objects associated with issues like attachments and worklogs.
- View JQL. - View licenses.
View the profile details for the currently logged-in user.
- View priorities. - View project categories. - View project roles. - View project versions. - View project components. - View project properties. - View projects. - View resolutions.
Read the details of sprints, their issues, and properties.
- View statuses. - View user properties. - View users. - View workflows. - Read and write to app storage service - Validate JQL. | | What data does the app access / process? | Mindpro Graphy accesses and processes the following data:
- Jira's Projects all data - Jira's Issues all data
- Jira's Users ids
- Jira's Dashboard Gadget Names - Jira's Dashboard Names | | What data does the app store? | Mindpro Graphy stores only the following data:
- Jira's Users ids - Jira's Dashboard Gadget Names - Jira's Dashboard Names | | Where are the data stored? | Mindpro Graphy is built with Atlassian’s latest development technology [Atlassian’s latest development technology Forge.](https://developer.atlassian.com/platform/forge/)
That means that, all data is stored and managed directly in [Atlassian's Forge Storage environment](https://developer.atlassian.com/platform/forge/runtime-reference/storage-api/).
The app run inside a second security layer that enforces tenancy isolation and data egress restriction by design, which translates into more meaningful security and privacy guarantees for our customers.
No customer-specific data is retrieved and stored in the Mindpro infrastructure. | | How does the app use this collected data? | We only collect as little data as possible to ensure the app works and unlocks its full potential for our customers. For this, the collected data is used to read and process the information of your Jira projects, boards, and issues to display these calculated information through cards and chart gadgets in the dashboards and views created in the app. | | Does the app stores any sensitive (personal or non-personal) information? | No sensitive personal or non-personal is anticipated to be stored by this app. | | Does the app encode all data in transit and at rest? | Not applicable. This app does not store End-User Data outside of Atlassian products and services. | | Who have access to the app data? | Mindpro Graphy uses Atlassian's Forge platform, so all customer data is stored directly in Atlassian's cloud structure.
That is, the stored data of this app is not saved in any Mindpro infrastructure/database.
Due to this architecture, the Mindpro team cannot access any app data outside of when the tool is utilized through the UI. | | Does this app have certifications or participate in advanced security programs? | Atlassian - Security Badge “Runs on Atlassian”:
- This is a new Marketplace security badge awarded by Atlassian for Forge apps that only use Atlassian-hosted compute and storage, provide data residency in the same regions as Atlassian apps, and allow customers to control data egress. - Mindpro Graphy have earned this badge, and all the associated security requirements are continually monitored via automation to verify that they are continuously met. - To learn more: [ Atlassian - “Runs on Atlassian”](https://www.atlassian.com/blog/developer/runs-on-atlassian-now-available)
Atlassian - Forge and “SOC 2 Compliance”:
- Atlassian’s Forge platform is now SOC 2 certified, which means that cloud apps built on the Forge platform can inherit advanced security controls that help satisfy up to 30% of SOC 2 requirements. - Important: SOC 2 control inheritance only applies to cloud apps with data that resides within the Forge boundary. - In this case, Mindpro Graphy is in full compliance with this requirement. - To learn more: [Atlassian - Forge and SOC 2 Compliance](https://developer.atlassian.com/platform/forge/forge-and-soc2/)
Atlassian - “Security Programs”:
- To learn more about the additional Atlassian Security Programs this app adheres to, please visit this link: [Mindpro - Security Measures](https://mindproapps.com/security-measures/) | | Does the app support data residency? | Yes, this app supports Data Residency in all currently available regions:
- Global - All Atlassian cloud across AWS regions - Australia - Consists of Australia (Sydney) region - Canada - Consists of Canada (Central) region - EU - Consists of Europe (Frankfurt) and Europe (Dublin) regions - Germany - Consists of Europe (Frankfurt) region - India - Consists of Asia Pacific (Mumbai) regions - Japan - Consists of Asia Pacific (Tokyo) region - Singapore - Consists of Asia Pacific (Singapore) region - South Korea - Consists of Asia Pacific (Seoul) region - Switzerland - Consists of Europe (Zurich) region - United Kingdom - Consists of Europe (London) region - USA - Consists of US East (North Virginia) and US West (North California) regions
To learn more, please see these additional resources:
- [App - Privacy & Security tab in the Marketplace](https://marketplace.atlassian.com/apps/1231327/lineup-queues-service-management-hub-jira-jsm?hosting=cloud&tab=privacy-and-security) - [Atlassian - Understand data residency](https://support.atlassian.com/security-and-access-policies/docs/understand-data-residency/) - [Atlassian - Moving your Marketplace apps data to another location](https://support.atlassian.com/security-and-access-policies/docs/moving-your-marketplace-apps-data-to-another-location/) | | Does the app have a data retention and recovery policy? | Forge apps (including Mindpro Graphy) follow Atlassian's internal Standard Data Retention and Disposal policy, and how your data is stored or deleted varies according to the scenarios below:
Scenario - License suspension or deactivation:
- If an app's license is suspended or deactivated, the app becomes inactive, but the system keeps all the stored data without changes. - The data remains unchanged while the app is inactive. A license suspension usually occurs when a customer misses a payment, such as after the grace period for payment recovery. - Once the payment is resolved, the license is reactivated, and the app regains access to the existing data.
Scenario - App uninstallation:
- According to Atlassian Forge policies, when an app is uninstalled, the data is only “soft deleted,” and the Forge-hosted storage retains the data for 28 days after uninstallation.
Scenario - App reinstallation:
- If a Forge app is reinstalled, it is treated as a new installation, which means your app data from the previous installation is not automatically restored. - However, according to Atlassian Forge policies, if a request is made within 21 days of uninstallation, the new installation can be relinked to the old data. - The data recovery process is mediated by Marketplace Vendors in coordination with Atlassian. - Therefore, to recover your data, you must submit a recovery request in our Support Portal using this[ link](https://mindpro.atlassian.net/servicedesk/customer/portal/3/group/3/create/10235) within 16 days of uninstallation, granting your consent to restore the data. - This ensures a minimum period for us to mediate your request with Atlassian and guarantee that it is processed before the 21-day request period ends. | | Does the app have a custom data deletion policy? | Mindpro cannot remove or access data for you due to the limited access to Atlassian's Forge Infrastructure.
However, you can request the deletion of this data on our Support Portal, and we will forward this request to Atlassian to carry out this process.
Upon this request, Atlassian will delete all End User Personal Data (including copies) processed on behalf of Mindpro in compliance with the procedures and retention periods outlined in [Atlassian's Forge DPA](https://developer.atlassian.com/platform/forge/resources/Forge-Data-Processing-Addendum.pdf).
The data deletion process occurs only on demand and via explicit user request. To request the deletion of the data stored, you can open a ticket anytime directly on our support portal [using this link](https://mindpro.atlassian.net/servicedesk/customer/portal/3/group/3/create/10235), and we will forward this request to Atlassian. | > ℹ️ Please note that this document is not a legal document nor a guarantee. It should be treated as guidance on what the Mindpro team strives to accomplish in this area. --- ### **Need any help?** Didn’t find what you were looking for? Get in touch at [security@mindproapps.com](mailto:security@mindproapps.com) or [open a security support ticket here.](https://mindpro.atlassian.net/servicedesk/customer/portal/3/group/3/create/10235)