Privacy Policy

This policy explains what information Zovle (“Zovle”, “we”, “us”) collects through zovle.in, through support and project conversations, and through the apps we publish on the Atlassian Marketplace, why we collect it, and the choices you have.

Zovle builds apps for Jira and Confluence Cloud and does custom Forge development. It is a sole proprietorship based in Hyderabad, India, owned by Mohammed Furquan, who is the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023, and the data controller for the purposes of the UK and EU GDPR. You can reach us at any time at [email protected], which is also the address for grievances and for any request described below.

The short version

• We do not sell your personal information, ever.
• Our Atlassian apps are built on Forge and keep their data inside Atlassian’s platform. We do not receive copies of your Jira or Confluence content.
• This website has no login, no shopping cart, and no form that stores data on our servers.
• No analytics and no cookies on this website until you agree. Decline and the site works exactly the same.

Our Atlassian apps

Zovle apps run on Atlassian Forge, Atlassian’s hosted app platform. When an app needs to remember something, such as its settings, it stores it in Forge’s hosted storage, which Atlassian operates and which is tied to your Atlassian site. That data is not sent to Zovle, and it is deleted according to Atlassian’s hosted-storage lifecycle after the app is uninstalled.

If a particular app ever needs to send data outside Atlassian, for example to call another service on your behalf, it will say so in the Privacy & Security tab of its Marketplace listing and on our security page before you install it, naming what is sent and where.

When you buy or evaluate an app, Atlassian handles the purchase. Atlassian shares licensing information with us as the app’s vendor, which can include your organisation’s name, your Atlassian site address and the contact details on the licence. We use it only to provide the app, support it, and handle licensing.

Information you give us

You can contact us by email or book a call through Calendly. When you do, we receive whatever you choose to share: usually your name, email address, company and a description of your question or project. If you raise a support request we may also receive screenshots or logs you choose to send. We use this only to respond, to support you, and to scope or deliver work you ask for. We do not use it for advertising.

Please do not send passwords, API tokens or other credentials. We will never ask for them.

Cookies and analytics on this website

Nothing is measured until you say yes. On your first visit we ask whether we may use Google Analytics. Until you choose Accept, no analytics script is loaded and no cookie is set. Declining is a single click, is exactly as easy as accepting, and changes nothing about how the site works. If you close or dismiss the notice without choosing, that counts as a refusal.

If you do accept, Google Analytics tells us which pages are read, roughly which country visitors come from, and which devices and browsers are used. It sets cookies to tell repeat visits apart. Google Analytics 4 does not store IP addresses. We never receive your name or contact details through analytics, and we do not use it for advertising or share it with advertisers.

You can change your mind whenever you like:

• Use the Cookie settings link in the footer of any page. Withdrawing is as easy as consenting was, and we delete the analytics cookies when you do.
• If your browser sends a “Do Not Track” or “Global Privacy Control” signal, we treat that as a refusal: analytics never loads, even if you accepted earlier, and we never ask.
• Block or delete cookies in your browser settings, or install Google’s official Analytics opt-out browser add-on.

Your choice is remembered in your browser’s local storage rather than in a cookie. That single entry is strictly necessary to honour the preference you expressed, and it is never used to identify you. Our apps inside Jira and Confluence set no analytics cookies of their own.

Who processes data for us

We keep our vendor list short and use reputable providers, each under their own privacy terms:

• Atlassian — runs our apps on Forge, and handles Marketplace purchases and licensing.
• Cloudflare — hosting and content delivery for zovle.in.
• Google Analytics — website usage measurement, only if you consent.
• Calendly — scheduling, if you book a call.
• Our email provider — to receive and answer your messages.

We do not share your information with anyone else, and we never sell it.

International transfers

We work with customers and use service providers around the world, so information may be processed outside your country. We only use providers that offer recognised safeguards for such transfers. Where your Atlassian site uses data residency, Forge hosted storage follows Atlassian’s data-residency rules for that site.

How long we keep it

Support and project emails are kept for as long as needed to help you and, if we work together, for the life of that engagement plus any period the law requires. Licensing records are kept as long as the licence is active and for any period accounting or tax law requires afterwards. Anonymous website analytics are retained per Google Analytics’ standard settings. You can ask us to delete your correspondence at any time.

Your rights

Depending on where you live, you have some or all of the following rights over the personal information we hold about you:

• Access — ask what we hold and why.
• Correction — have anything inaccurate or incomplete put right.
• Erasure — ask us to delete it.
• Objection and restriction — object to a particular use, or ask us to pause it.
• Portability — receive what you gave us in a common, machine-readable format, or have it sent onward.
• Withdrawal of consent — withdraw analytics consent at any time through the Cookie settings link in the footer, or any other consent by emailing us. Withdrawing is as easy as giving it, and does not affect anything done beforehand.
• Nomination — if you are in India, nominate someone to exercise these rights on your behalf if you die or become incapacitated, as the Digital Personal Data Protection Act, 2023 provides.

To exercise any of these, email [email protected] and we will respond promptly and without charge. If you are unhappy with our answer you have the right to complain to a supervisory authority: in India, the Data Protection Board; in the UK, the Information Commissioner’s Office; in the EU, the authority in the country where you live or work. We would rather you told us first so we can put it right.

Children

Our website and apps are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18, and we do not use it for tracking, behavioural monitoring or targeted advertising directed at children.

Security

How we build and protect our apps is described on our security page, including how to report a vulnerability. This website is served over HTTPS with a strict content-security policy and fetches no third-party code beyond the analytics described above.

Changes to this policy

If our practices change, we will update this page and the date above. Material changes will be reflected here before they take effect.

Contact

Questions about this policy? Email [email protected].