Effective Date: October 18, 2026
1. Introduction
This Privacy Policy explains how Clearstep ("we", "us", "our") collects, uses, and protects information when you use the Rovo & Usage Cost Center app ("the App") on Atlassian Jira Cloud.
The App is a Forge app that runs entirely within Atlassian infrastructure on your Jira Cloud site. We do not operate a separate backend server for this App. This policy applies only to Rovo & Usage Cost Center. Automation Step Cost Analyzer has its own privacy policy.
2. Credential policy
This app does not collect Atlassian account credentials (passwords, API tokens, OAuth secrets, or admin API keys). Authorization uses Atlassian Forge scopes only.
3. How the App accesses data
- Native Forge app ("Runs on Atlassian") with no configured egress
- Scopes:
storage:app,read:group:jira,read:user:jira,read:avatar:jira,report:personal-data - Usage data enters the App only when an admin imports a Platform usage CSV (parsed in the browser) or enters manual meter totals
- Group membership is read with Forge
asApp()when an admin syncs Jira groups for team attribution
4. Information we process
4.1 Usage and attribution data
- Aggregated usage totals derived from imported Platform usage CSVs (credits by day, user key, feature/agent) — not raw CSV rows, Usage IDs, or per-event timestamps
- Atlassian account IDs used as keys for per-user totals and team mapping
- Display names and emails only when supplied by group membership reads or mapping files (emails may be absent depending on Jira privacy settings)
- Team mapping (uploaded CSV and/or Jira group rules) and cost centre labels
- Settings you configure (currency, rates, allowances, retention, budgets, cleanup rules)
- Import metadata (file name, checksum, date range) — not the raw file
5. How we store your data
All App data is stored in Atlassian Forge app storage on your site, which:
- Resides on your Jira Cloud / Forge installation
- Is encrypted at rest by Atlassian
- Is isolated to your specific Atlassian instance
We do not transmit your usage data to Clearstep servers or any third-party sub-processors. There is no remote backend and no egress. Data residency follows the Atlassian Forge platform for your site.
6. How we use your data
- Attribute and forecast Rovo credit usage by team, user, and agent
- Compute budgets, alerts, chargeback CSV/PDF, and attribution cleanup previews
- Comply with Atlassian personal data reporting for stored account IDs (closed accounts are anonymised; updated accounts have cached display names/emails cleared)
7. Data retention and deletion
- Day-level detail is retained for a limited window (default compaction removes day buckets after periods end and age out); period totals are retained according to your retention setting (default 36 months, configurable 12–60)
- Purge all data in Settings deletes stored App data on the site (with typed confirmation)
- Uninstall removes the App; Forge storage for the installation is deleted according to Atlassian Forge lifecycle behaviour
8. Logging
The App does not operate external log pipelines. Any diagnostic logs remain within Atlassian Forge logging for the installation. We do not share End-User Data logs with third parties.
9. Data sharing
We do not sell, rent, or share your App data with third parties. Processing stays inside Atlassian Forge on your site.
10. Important disclaimer
Figures are derived from Atlassian usage exports you imported and from rates you configured. Your Atlassian invoice is authoritative. Do not treat App outputs as official billing.
11. Your rights and choices
- Access — View stored totals, mappings, and settings in the App UI
- Delete — Use Purge all data, or uninstall the App
- Account closure / updates — The App reports stored account IDs to Atlassian and anonymises or refreshes personal data as required
12. Certifications
Clearstep does not claim SOC 2, ISO, Cloud Fortified, or other compliance certifications for this App. Customers rely on Atlassian Forge platform controls for hosting.
13. Children's privacy
The App is intended for business use within Atlassian Jira Cloud. We do not knowingly collect information from children under 16.
14. Changes to this policy
We may update this Privacy Policy from time to time. The Effective Date at the top indicates when the policy was last revised. Material changes will be reflected on this page and, when listed, on the Atlassian Marketplace listing.
15. Contact us
Email: support@clearstepsapps.com
Security: security@clearstepsapps.com
Governing law: Province of Quebec, Canada.
This Privacy Policy applies to the Rovo & Usage Cost Center Forge app. For Automation Step Cost Analyzer, see privacy.html.