ikuTeam Files Apps
(Jira and Confluence) Privacy Policy

Effective on 2026-03-31

Thank you for choosing ikuTeam, Lda. This Privacy Policy outlines how we handle data within our ikuTeam Files applications. Our architecture is built on the Atlassian Forge platform and AWS infrastructure, specifically designed to meet the requirements of highly regulated environments, including GDPR, CCPA, HIPAA, and the Australian Privacy Act.

Information We Collect

ikuTeam operates under a Zero-Persistence model. We do not collect, request, or store personal data (PII) from users. Our apps act as a secure, transparent bridge between your Atlassian environment and your chosen cloud storage.

• App Configuration: Any settings or configurations you define are stored within the Atlassian Forge infrastructure.
• Customer Content: We do not collect or store the content of your files, spreadsheets, or presentations.

Data Retention

Since we do not collect personal data, we do not retain it.

• Ephemeral Processing: In the simplified permissions setup, for Office Documents Editing, files are loaded into the AWS engine's volatile memory (RAM) solely for the duration of the editing session. Once the session is closed or the file is saved back to the source, the memory is flushed immediately.
• No Persistent Storage: No customer files or document fragments are ever written to physical disks or persistent databases within ikuTeam’s infrastructure.
• User Control: Data retention is governed entirely by your own policies within your Atlassian site or third-party storage (SharePoint, Google Drive, Box, etc.).

IMPORTANT: if you use the DataCenter or SharePoint Connections in the Cloud apps with the option “Mirror Storage Permissions” ON, the ikuTeam Office engine is not used, only Microsoft's own Office Engine. No data is transferred or processed on our end.

Data Residency

With our migration to Atlassian Forge, the residency of your data has been further strengthened:

• User Tokens & Metadata: All OAuth tokens and application metadata are now stored within Atlassian’s native infrastructure. We no longer store user tokens on ikuTeam servers. This ensures that your credentials follow Atlassian’s own data residency and security protocols.
• Processing Locations: The ikuTeam’s Office editor engine performs processing on AWS infrastructure located in Frankfurt (EU) or US-East-1 (USA). Data is encrypted end-to-end during transit and exists in these regions only as transient fragments in memory.
• Compliance: By using the apps, you consent to the transient processing of data in these regions, protected by TLS 1.2+ encryption and our ISO 27001-certified management system.

Security Measures

We implement rigorous technical and organizational safeguards to protect the integrity of the data bridge:

• End-to-End Encryption: All data transferred between the Atlassian platform, the user's browser, and our AWS processing engine is encrypted in transit using industry-standard protocols.
• Isolation: The Forge platform provides a high-security sandbox that isolates our app logic from other Atlassian customers.
• Access Controls: We maintain strict internal access controls; however, because we do not store customer data or tokens, ikuTeam personnel have no technical means to access your files or storage environments.

Integration Permissions (Atlassian Forge Scopes)

To provide seamless integration, our Forge apps require specific permissions (scopes) within your Atlassian instance:

• View and manage data (Read/Write): Required to display file pickers, save edited documents back to Jira/Confluence, and render macros.
• Act on behalf of a user: Allows the app to perform storage operations (like previewing a SharePoint file) using the permissions of the currently logged-in user.
• Run background tasks: Ensures that file metadata remains synced and macros display correctly even during complex asynchronous operations.
• Storage API: Used to save app-specific settings (like folder mapping) within the secure Atlassian platform storage.

Changes to this Policy

We may update this Privacy Policy to reflect changes in our apps or legal requirements. If a revision significantly impacts how data is handled, we will notify you via the Atlassian Marketplace or your registered administrator email.

Contact Us For questions regarding our "Zero-Persistence" architecture or data handling, please contact our Support at support@ikuteam.com.

Contact

Have questions or concerns about ikuTeam, our Services and privacy? You can contact us about this privacy statement by writing or email us at the address below:

ikuTeam
Rua Gonçalo Sampaio 329, 4E
4150-367 Porto
PORTUGAL

Email: support@ikuteam.com