Cloneyard for Jira: Privacy Policy
Effective date: October 1, 2026 Publisher: Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA Contact: hello@greatwork.company
This policy explains what information the Cloneyard app for Jira Cloud (the "App") processes, where it is kept, and your rights. It covers only the App, not Atlassian's products, which are governed by Atlassian's own privacy policy.
1. Summary
- The App runs entirely on Atlassian's Forge platform ("Runs on Atlassian"). It has no servers of its own and sends no data to Great Work or to any third party.
- The App reads work items you choose to clone and writes the clones into your own Jira site. Field values, attachments and comments go from Jira to Jira; the App does not keep copies.
- The App stores job progress (which work items were cloned to which, counts, notes), presets and settings in its storage on Atlassian's platform for your site.
- Great Work LLC cannot see your work items, your jobs or who used the App.
2. What the App processes
| Data | Why | Where it lives |
|---|---|---|
| The work items you select: all their fields, attachments, comments, links, sprints, status | To create the clones | Read from Jira and written to Jira while a job runs; held in memory only, never stored by the App |
| Job records: the options you chose (JQL, projects, mapping, summary text to find and replace, labels), work item ids, keys and types, the key of each clone, per-item results and notes with example keys, the account id of the person who ran it | To run the job in the background, show the preview and results, and support Retry and Undo | Forge app storage for your site; deleted automatically 90 days after the job |
An issue property cloneyard on each clone: the job id and the original's id and key | So the App never creates a duplicate after an interruption, and so JQL can find the clones of a work item | In your Jira site, on the clone, until the clone is deleted |
| Presets: a name, the clone options, the owner's account id, shared or not | So people can reuse a setup | Forge app storage until deleted or uninstall |
| Settings: allowed group ids, job size and attachment size limits | To apply your admins' choices | Forge app storage until changed or uninstall |
| Audit log: time, account id, a short description (for example "Started Copy LKIT to GLX (12 issue(s))"), job id | So admins can see who cloned what | Forge app storage, the latest 1,000 entries |
| Your account id, groups and Jira permissions | To check what you may clone and where | In memory only |
The App does not collect email addresses, IP addresses, passwords, API tokens, payment information or analytics. It sets no cookies and loads no third-party scripts.
3. Where data is stored
All App data is stored by Atlassian in Forge app storage for your Jira site, encrypted at rest by the platform and subject to Atlassian's data residency settings. Atlassian is the hosting provider and acts as a subprocessor under Atlassian's terms. Great Work LLC uses no other subprocessors.
4. Who can see what
- Clones: like any work item, whoever Jira lets see the target project.
- Jobs: the person who ran them, and Jira admins (admin page). Presets: their owner, or everyone on the site when shared. The audit log: Jira admins.
- Great Work LLC: no access. If you open a support request, we see only what you send us.
- Atlassian: as the platform operator, under Atlassian's privacy policy.
5. Retention and deletion
Job records expire 90 days after they are created; Undo is available for 30 days. Deleting a preset deletes it. Uninstalling the App removes its Forge storage according to Atlassian's Forge data deletion process. Clones and the issue property on them are ordinary Jira data and stay in your site until you delete them (Undo deletes the clones of a job).
6. Support requests
If you contact support through our help desk or by email, we process what you send (name, email, message, attachments) only to answer you, keep it up to 24 months, and delete it sooner on request.
7. Your rights
Depending on where you live (for example EU/UK GDPR or US state privacy laws), you may have the right to access, correct, delete or port personal data and to object to processing. For data in your Jira site, your organization (the Atlassian customer) is the controller and Atlassian processes it on your behalf; your admins can delete clones, presets and jobs or uninstall the App. For support data, Great Work LLC is the controller: email hello@greatwork.company. We respond within 30 days.
8. Security
The App uses only Atlassian-hosted compute and storage. Searches that pick work items run as you; the background job then checks that you can browse every work item it adds and hold the needed permissions in every target project before it creates anything. The App keeps no secrets of its own. Report vulnerabilities to hello@greatwork.company.
9. Children
The App is a business tool and is not directed to children under 16.
10. Changes
We will post changes here and update the effective date. Material changes will also be announced in the App's Marketplace release notes.
11. Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company