Planyway and GDPR

Last Updated: October 29, 2026

This document applies to Planyway for Jira Cloud. For other Planyway products, see Planyway and GDPR.

The General Data Protection Regulation (GDPR) regulates the collection and processing of personal information belonging to individuals in the European Economic Area. Planyway is committed to complying with the GDPR and enabling our customers to comply with it.

• Does Planyway have a Data Protection Contact?

Yes. Planyway’s privacy contact can be reached at support@planyway.com.

• Does Planyway enter into Data Processing Agreements?

Yes, Planyway offers a data processing addendum ("DPA"): Data Processing Addendum.

• Where is Jira data stored?

Planyway for Jira Cloud is built on the Atlassian Forge platform. Jira data and the app data are stored in Jira and in the Atlassian infrastructure, according to the data residency settings of your Jira site. Jira project and issue content is not copied to Planyway servers.

• What does Planyway receive?

Planyway receives usage and diagnostic data, limited user and account information described below, and information you choose to submit through surveys, feedback, newsletters, and support. Jira content, tokens and secrets are masked before usage and diagnostic data leaves the app.

• How is the data secured?

See Security.

• What information do we collect about you?

Legal bases for processing (for EEA users)

• Legitimate interest — product analytics and maintenance.
• Performance of the agreement — support, service notifications.
• Consent — newsletters. You can withdraw consent at any time using the unsubscribe link.

Where we rely on legitimate interest, you have the right to object.

Data Retention

Diagnostic telemetry stored in Microsoft Application Insights is retained for up to 3 months. Product analytics stored in Amplitude is retained for up to 12 months. Identifiable usage and analytics data stored by Planyway is generally retained for up to 24 months, after which it is deleted or irreversibly anonymized. We may retain aggregated or irreversibly anonymized historical statistics for longer, including indefinitely. Certain records may be retained for longer where necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

Subprocessors

Planyway engages third party service providers that process personal data on our behalf ("Subprocessors"). Transfers of personal data from the EEA, UK and Switzerland to Subprocessors located in the USA rely on the EU-U.S. Data Privacy Framework (where the Subprocessor is certified) and/or Standard Contractual Clauses.

Last Updated: October 29, 2026