πŸ“ Data Processing Agreement (DPA)

πŸ“ Data Processing Agreement (DPA)

This Data Processing Agreement outlines how Sprint Health Analyzer, developed by Typeswitch, handles customer data in compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).

By using the app, you acknowledge and accept the terms of this DPA.


πŸ“Œ Nature and Purpose of Processing

Sprint Health Analyzer processes only Jira Cloud issue metadata in read-only mode, for the sole purpose of calculating:

  • Health Scores per issue

  • Agile metrics (velocity, burndown, burnup)

  • Workflow patterns and delivery risk indicators


πŸ“¦ Categories of Data Processed

The app may access the following Jira fields (if present):

Data Element

Type

Purpose

Data Element

Type

Purpose

Issue key

Metadata

Identify and link issues

Summary

Metadata

Display context in tables

Status and transitions

Metadata (changelog)

Calculate time and risk metrics

Story Points

Custom field

Measure scope and velocity

Issue links

Metadata

Detect blockers/dependencies

Sprint assignment

Metadata

Group issues for Agile metrics


πŸ” Data Storage and Retention

Sprint Health Analyzer:

  • Does not store any data outside the user’s Jira instance

  • Does not retain data between sessions

  • Does not export, replicate, or back up any personal or project data

  • Relies entirely on in-memory computation and Atlassian-hosted Forge execution


🌍 Subprocessors

No subprocessors are involved.
All app logic executes within Atlassian’s Forge infrastructure β€” no third-party services are used.


πŸ“€ International Data Transfers

All data remains within Atlassian’s cloud infrastructure. Sprint Health Analyzer does not initiate or manage any cross-border data transfers.


πŸ›  Security Measures

  • Sandboxed execution in Forge

  • No write access to Jira data

  • Scope-limited permissions (read-only)

  • No persistent storage or database layer

  • No outbound communication or tracking


πŸ“ƒ Legal Basis

The legal basis for processing is the performance of a contract β€” namely, providing analytical functionality to Jira users inside their instance, under the Marketplace agreement.


πŸ“§ Contact for DPA-Related Requests

For privacy, security, or data processing questions, contact:

πŸ“¨ support@typeswitch.net

We typically respond within 1–2 business days.