TimeTally ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Jira time tracking application ("Service").
1. Information We Collect
1.1 Data We Access
When you use TimeTally, we access and store:
Data Type
Purpose
Retention
Jira Account ID
User identification
Until app uninstall
Display Name
UI personalization
Until app uninstall
Time Entries
Core functionality
Until deleted or uninstall
Issue Keys
Worklog association
Until deleted or uninstall
Timer State
Pause/resume tracking
Session-based
1.2 Data We Do NOT Collect
Email addresses (we use Jira Account IDs only)
Payment information (handled by Atlassian Marketplace)
Issue content or attachments
Personal files or documents
Browser history or cookies outside the app
2. How We Use Your Information
We use your data exclusively to:
Display your time tracking records
Generate personal and team reports
Synchronize with Jira worklogs
Provide administrator visibility (for authorized users)
3. Data Storage and Security
3.1 Infrastructure
All data is stored on Atlassian Forge infrastructure (AWS), which provides:
SOC 2 Type II compliance
ISO 27001 certification
GDPR compliance mechanisms
3.2 Encryption
At Rest: AES-256 encryption via Forge Storage
In Transit: TLS 1.2+ enforced by Atlassian
3.3 Access Controls
Tenant isolation enforced by Forge platform
User data accessible only to that user and site administrators
No cross-tenant data access possible
4. Data Sharing
We do not sell, rent, or share your personal data with third parties.
Your data is only accessible to:
You: Your own time entries and reports
Jira Site Administrators: Team overview for management purposes
5. Your Rights
5.1 GDPR Rights (EU Users)
You have the right to:
Access: Request a copy of your data
Rectification: Correct inaccurate data
Erasure: Delete your data ("right to be forgotten")