Data and security

Pivot & Roll-up Reports is built on Atlassian Forge and qualifies for Runs on Atlassian. In short: your Jira data stays in Atlassian, and Embertail never receives it.

Where your data goes

What	Where it lives
Issues, fields, worklogs, people	Read from Jira as the person viewing, in their browser or in Forge functions run by Atlassian. Never stored by the app
Saved reports and their sharing	Forge storage for your site: report layouts (JQL, fields, settings), names, owners and editors as Atlassian account IDs and display names
Favourites, app settings, AI request counts	Forge storage for your site
Last week’s totals, for “changes since last week”	Forge storage for your site: each viewer’s own totals for a saved report, deleted after 70 days
Deleted reports	Forge storage for your site, deleted after 30 days
Exports, printouts, PDFs	Made in your browser, saved on your computer

Forge storage is managed by Atlassian, hosted in the same region as your Jira site, and moves with it if your admin migrates the site’s data residency.

No outside servers

The app makes no network requests outside Atlassian. Its manifest declares no external hosts, which is what Atlassian checks for Runs on Atlassian.

Permissions

• The app asks only to read Jira work and read Jira users, plus app storage.
• It never creates, edits or deletes issues.
• Every Jira request is made as the person using the app, so reports, shared reports, gadgets and exports show only what that person can see in Jira.
• Access to saved reports (private, shared, editors, owners) is checked on Atlassian’s servers, not in the browser.
• Jira admins can limit who can use the app and its AI in App settings.

AI

AI features go through Atlassian’s Forge LLMs service and run on Atlassian’s platform. What is sent:

• Building or changing a report: your question, the site’s project keys and status names, and the current report layout.
• Explaining: the labels and numbers already shown in the table, such as epic names, people’s names, issue keys and totals. Never full issue details such as descriptions or comments.

The AI is only asked to write a report layout or a short explanation. Answers are checked before use, and every number in a report is calculated by the app, not by the AI. Each site has a monthly cap on AI requests.

What Embertail can see

Embertail never sees your issues or saved reports. Through Atlassian we receive:

• Marketplace licensing details, such as your site and its billing and technical contacts
• the app’s logs, which record events such as “report saved” with report ids and Atlassian account ids, never report contents or issue data
• usage metrics from Atlassian, such as installs and function errors

If you email support, we see what you send.

Reporting a security issue

Email support@embertail.co.uk with Security in the subject. We’ll reply quickly and keep you updated until it’s fixed.

See also the Privacy policy.