PRIVACY POLICY

gistfile1.txt

# Privacy Policy — AlertBridge

**Last updated:** January 2026

## 1. Overview
AlertBridge is a Jira Forge application that receives Alertmanager-compatible webhook events and creates or updates Jira issues accordingly.

We collect and process only the minimum data required for the app to function.

---

## 2. Data We Store
AlertBridge stores the following data inside Atlassian Forge storage:

- Jira configuration:
  - Selected project key
  - Selected issue type
  - Workflow transition names (if configured)
- Webhook authentication token (stored securely as a secret)
- Deduplication metadata:
  - Alert fingerprint → Jira issue key mapping
  - Counters and timestamps
- Operational health data:
  - Last webhook received timestamp
  - Last error message (if any)

---

## 3. Data We Do NOT Store
- Full alert payloads are not stored
- Alert labels and annotations are processed only at request time
- No personal user data is stored outside Jira
- No data is sent to external servers

---

## 4. Data Processing
- All processing occurs inside Atlassian Forge infrastructure
- Jira API calls are performed using Forge `asApp()` permissions
- No external APIs or third-party services are used

---

## 5. Data Sharing
AlertBridge does not share data with any third parties.

---

## 6. Security
- Webhook tokens are stored using Forge secrets
- Tokens are never logged or exposed after generation
- All webhook communication occurs over HTTPS

---

## 7. Data Retention
Stored configuration and mappings remain until the app is uninstalled or configuration is changed by the user.

---

## 8. Contact
For privacy-related questions, contact:

waelheni@neurahex.com