Legal
Data retention
Statement required for the Atlassian Marketplace listing. Source of truth for platform behavior: Atlassian's “Data lifecycle for Forge-hosted storage”, verified 2026-08-31.
Where
Where data lives
All app data is Forge hosted storage (Forge SQL), per installation, in the site's Atlassian app partition. The vendor operates no external storage.
Platform
Retention behavior (platform-managed)
- App installed
- Storage provisioned for that site.
- App upgraded
- Additional storage provisioned as needed; existing data unaffected.
- App uninstalled
- Data is soft-deleted, then deleted per Atlassian's Standard Data Retention and Disposal policy (Atlassian SOC 2 report).
- App reinstalled
- New installation. On request within 21 days of uninstall, Atlassian can relink to the previous data.
- License suspended
- App inactive; data kept unchanged until the license is resolved.
- App deleted (vendor)
- Only after all installations are removed; each uninstall follows the retention above.
- Site deleted
- App data deleted together with the site after the site's soft-delete period.
App-managed
App-managed expiry
Some records are short-lived by design and deleted by the app itself:
oauth_states— deleted on expirywebhook_deliveries— deleted on expiry-
webhook_events— age-deleted by the hourly scheduled job
Legacy data
Installations that upgraded through 0.3.x may hold orphaned Forge Key-Value entries from before the SQL migration. Nothing reads them; they follow the same lifecycle as all other app data.