Privacy notice
Effective date: 2026-08-24
Who is responsible
RuleSignal von der Mey, Europa-Allee 41-43, 60327 Frankfurt am Main, Deutschland is responsible for the RuleSignal app and its support channel. Privacy enquiries: privacy@rulesignal.app.
Automation exports
RuleSignal reads a user-selected Jira automation JSON export inside the app's browser tab. A browser worker parses and analyzes the file. The source and result stay in browser memory for that tab and are removed when the tab closes or reloads. Reports are generated and downloaded only when the user requests them.
The vendor does not receive or persist the selected export. The app has no Jira API scopes, vendor backend, Forge remote, vendor database, third-party analytics collector, upload endpoint, or AI-processing path.
Minimal product metrics
RuleSignal can increment three Atlassian-hosted Forge counters when a user-selected export completes analysis, two user-selected exports complete comparison, or a report is exported. RuleSignal supplies no file name, rule, finding, score, fingerprint, user identifier, or other payload. Atlassian attaches installation context, and site administrators can disable custom-metric ingestion. Metrics may be visible to the app owner by site for product-operation purposes.
Atlassian platform data
RuleSignal reads the Forge view context needed to determine the app's license state. Atlassian may process account, Marketplace, billing, security, and technical platform data under Atlassian's own terms and privacy notices. RuleSignal does not independently copy that data into vendor infrastructure.
Support communications
If you contact support, the responsible entity and its email provider may process your name, email address, message, and attachments to answer the request, maintain service security, and document the resolution. Do not send raw automation exports; use a sanitized screenshot, format fingerprint, RS check ID, and redacted component shape.
Email provider: netcup GmbH. Approved retention: 90 days. Legal basis and international-transfer assessment: RuleSignal processes support contact data to answer requests and administer the customer relationship under Article 6(1)(b) GDPR and, where necessary, under Article 6(1)(f) GDPR for the legitimate interests of maintaining service security, preventing abuse, and documenting support. The mailbox is operated for RuleSignal by netcup GmbH, Germany. RuleSignal does not intentionally transfer support communications outside the European Economic Area. Routine support messages are deleted within 90 days after resolution unless longer retention is required to comply with law or to establish, exercise, or defend legal claims.
Your rights and complaints
Data subjects may request access, correction, deletion, restriction, or data portability where applicable, and may object to processing based on legitimate interests, by emailing privacy@rulesignal.app. They may also lodge a complaint with the Hessian Commissioner for Data Protection and Freedom of Information at https://datenschutz.hessen.de/. Providing contact data is voluntary but is necessary for RuleSignal to answer a support request. RuleSignal performs no automated decision-making or profiling with support-contact data
Changes
The published notice will carry an effective date. Material architecture changes—especially adding scopes, remotes, storage, new metrics, third-party analytics, or AI processing—require a privacy review before release.