π Data Processing Agreement (DPA)
This Data Processing Agreement outlines how Sprint Health Analyzer, developed by Typeswitch, handles customer data in compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).
By using the app, you acknowledge and accept the terms of this DPA.
π Nature and Purpose of Processing
Sprint Health Analyzer processes only Jira Cloud issue metadata in read-only mode, for the sole purpose of calculating:
Health Scores per issue
Agile metrics (velocity, burndown, burnup)
Workflow patterns and delivery risk indicators
π¦ Categories of Data Processed
The app may access the following Jira fields (if present):
Data Element | Type | Purpose |
|---|---|---|
Issue key | Metadata | Identify and link issues |
Summary | Metadata | Display context in tables |
Status and transitions | Metadata (changelog) | Calculate time and risk metrics |
Story Points | Custom field | Measure scope and velocity |
Issue links | Metadata | Detect blockers/dependencies |
Sprint assignment | Metadata | Group issues for Agile metrics |
π Data Storage and Retention
Sprint Health Analyzer:
Does not store any data outside the userβs Jira instance
Does not retain data between sessions
Does not export, replicate, or back up any personal or project data
Relies entirely on in-memory computation and Atlassian-hosted Forge execution
π Subprocessors
No subprocessors are involved.
All app logic executes within Atlassianβs Forge infrastructure β no third-party services are used.
π€ International Data Transfers
All data remains within Atlassianβs cloud infrastructure. Sprint Health Analyzer does not initiate or manage any cross-border data transfers.
π Security Measures
Sandboxed execution in Forge
No write access to Jira data
Scope-limited permissions (read-only)
No persistent storage or database layer
No outbound communication or tracking
π Legal Basis
The legal basis for processing is the performance of a contract β namely, providing analytical functionality to Jira users inside their instance, under the Marketplace agreement.
π§ Contact for DPA-Related Requests
For privacy, security, or data processing questions, contact:
We typically respond within 1β2 business days.