Skip to main content

Privacy Policy

Last updated: May 19, 2026

NGPILOT, Inc. ("NGPILOT," "we," "us," or "our") operates a suite of applications ("Apps") available on the Atlassian Marketplace for Confluence and Jira. This Privacy Policy explains how we collect, use, store, and share information when you use our Apps, and how you can contact us about your privacy.

1. Data We Collect and Access​

Our Apps are built entirely on Atlassian Forge and run within Atlassian's cloud infrastructure. This means:

What We Access​

To provide App functionality, our Apps may access the following data through Atlassian's APIs:

  • Confluence data: Page content, space metadata, attachments, user-generated content (e.g., diagrams, code blocks, markdown, formatted text, templates, FAQs)
  • Jira data: Issue content, issue attachments, project metadata, custom fields, issue templates
  • User context: Display name, avatar, and account identifier provided by Atlassian's platform to render user-specific features

What We Do NOT Collect​

  • Passwords or authentication credentials
  • Payment or billing information (handled by Atlassian)
  • Personal information beyond what Atlassian's platform provides through standard user context
  • Data unrelated to the App's functionality

How Data Is Accessed​

All data access occurs through Atlassian's official, permission-scoped Forge APIs. Our Apps only request the minimum scopes required for their functionality (principle of least privilege). Access is authenticated and authorized on every request.

2. How Data Is Used​

Data accessed by our Apps is used solely to provide the App's intended functionality. For example:

  • Rendering and displaying content (diagrams, code blocks, markdown, fonts, templates)
  • Processing and converting content between formats (import/export)
  • Generating visual elements (QR codes, charts, announcements)
  • Organizing and presenting information (FAQs, tables, task lists, questions)

All data processing occurs within the Atlassian Forge runtime environment. No data is sent to, processed by, or stored on any external servers, third-party APIs, or AI services outside of Atlassian's infrastructure.

3. Data Storage and Retention​

Where Data Is Stored​

  • App configuration and user preferences: Stored in Atlassian Forge Storage or Confluence/Jira Entity Properties, which reside within the customer's Atlassian cloud tenant
  • Content created by the App: Stored within the customer's Confluence or Jira instance as standard content
  • No external storage: We do not store any customer data on our own servers or any third-party infrastructure

Data Residency​

Because our Apps run on Atlassian Forge, data residency follows the customer's Atlassian site configuration. Data remains in the Atlassian region selected by the customer's organization. For details, see Atlassian's Data Residency documentation.

Retention​

Data stored within the customer's Atlassian instance is retained according to the customer's own data retention policies. When an App is uninstalled, any App-specific data stored in Forge Storage or Entity Properties is removed in accordance with Atlassian's app uninstallation procedures.

4. Third Parties and Subprocessors​

Atlassian​

Atlassian Corporation Plc is our sole platform provider. Atlassian hosts, secures, and operates the infrastructure on which our Apps run, including:

  • Atlassian Forge (compute runtime)
  • Forge Storage (key-value storage)
  • Atlassian Cloud (Confluence, Jira, and platform services)

Atlassian's privacy practices are governed by their own Privacy Policy.

No Other Third Parties​

We do not share, send, or make available any customer data to any other third parties, subprocessors, analytics services, or advertising networks.

5. Data Sharing​

We do not sell, rent, trade, or otherwise share personal data with third parties for their own use, except:

  • As required by applicable law, regulation, or legal process
  • To protect the rights, safety, or property of NGPILOT, our users, or the public
  • With the user's explicit consent

6. Your Rights and Choices​

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data
  • Objection: Object to the processing of your personal data
  • Data portability: Request your data in a structured, machine-readable format

Since our Apps run on Atlassian Forge and most data resides in your Atlassian instance, many of these requests can be fulfilled directly through your Atlassian administration tools. For any requests specific to our Apps, please contact us using the details below.

We aim to respond to all privacy-related requests within 30 days.

7. Children's Privacy​

Our Apps are not directed to anyone under the age of 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Privacy Policy​

We may update this Privacy Policy from time to time. When we make changes, we will:

  • Update the "Last updated" date at the top of this page
  • Post the revised policy on this page
  • For material changes, provide notification through appropriate channels (e.g., App update notes, email)

Changes become effective immediately upon posting. Continued use of our Apps after changes constitutes acceptance of the updated policy.

9. Contact Us​

For any questions, concerns, or requests related to this Privacy Policy or our data practices:

We will respond to privacy-related inquiries within 30 days.