Planyway and GDPR

Last Updated: October 29, 2026

This document applies to Planyway for Jira Data Center. For other Planyway products, see Planyway and GDPR.

The General Data Protection Regulation (GDPR) regulates the collection and processing of personal information belonging to individuals in the European Economic Area. Planyway is committed to complying with the GDPR and enabling our customers to comply with it.

• Does Planyway have a Data Protection Contact?

Yes. Planyway’s privacy contact can be reached at support@planyway.com.

• Does Planyway enter into Data Processing Agreements?

Yes, Planyway offers a data processing addendum ("DPA"): Data Processing Addendum.

• Where is Jira data stored?

On your organization’s Jira Data Center servers. Jira project and issue content is not transmitted to Planyway; the limited user, license and telemetry data that may be shared is described below.

• What does Planyway receive?

Only if your Jira system administrator enabled “Share usage and diagnostic data”: usage and diagnostic data, user and license details and the information you choose to send us. When data sharing is not enabled, the Jira Data Center app does not send usage events, diagnostic data, or Jira user details to Planyway. The support chat still works, and any messages and contact details you send through it are received by Planyway.

• How is the data secured?

See Security.

• What information do we collect about you?

Legal bases for processing (for EEA users)

• Legitimate interests — product analytics, maintenance, survey and feedback. We process usage and diagnostic data where necessary for our legitimate interests in maintaining, securing, understanding and improving Planyway. We minimize the impact by collecting only defined fields, excluding Jira project and issue content from analytics, sanitizing diagnostic telemetry, limiting retention, and restricting telemetry until a Jira system administrator enables data sharing.
• Performance of the agreement — support.

The administrator’s “Share usage and diagnostic data” choice controls whether this telemetry leaves the Jira instance; it is not GDPR consent. To exercise applicable privacy rights, including the right to object to processing based on legitimate interests, contact support@planyway.com.

Data Retention

Diagnostic telemetry stored in Microsoft Application Insights is retained for up to 3 months. Product analytics stored in Amplitude is retained for up to 12 months. Identifiable usage and analytics data stored by Planyway is generally retained for up to 24 months, after which it is deleted or irreversibly anonymized. We may retain aggregated or irreversibly anonymized historical statistics for longer, including indefinitely. Certain records may be retained for longer where necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

Subprocessors

Transfers of personal data from the EEA, UK and Switzerland to Subprocessors located in the USA rely on the EU-U.S. Data Privacy Framework (where the Subprocessor is certified) and/or Standard Contractual Clauses.

Last Updated: October 29, 2026