The information collected by Play SQL, Requirement Yogi and other products, comes from:
We mostly gather information through support cases. We also receive information from Atlassian through licenses ("Atlassian-collected end-user data"), Jira support issues, and from Google Analytics which we use our websites.
We host data created by users in our Cloud apps.
We don't gather any data when apps are installed by the customers on their own server, with the exception of the "feedback job" in Play SQL Base, explained in the table below.
We use the information to:
Atlassian is not responsible for the privacy, security or integrity of Vendor-Collected End User Data.
|Mode||Product||Status||Framework||Atlassian-collected end-user data (1)|
Vendor-collected end-user data (1)
|Data containing PII(3)||Other collected data, in normal usage|
using Atlassian's official ACSB.
|The license subscription information||None||Application data(2) (the requirements, page IDs, page titles, Jira issues)|
|Cloud||Requirement Yogi for Jira||Paid||The license subscription information||None||Application data(2) (the requirements text, page IDs, page titles, Jira issues)|
|Server / DC|
Atlassian P2 plugins
|The license subscription information||None|
|Server / DC||Requirement Yogi for Jira||Free||None||None||None|
|Server / DC||RY Testing & Compliance||Paid||The license subscription information||None||None|
|DC||RY-Comala integration||Paid||The license subscription information||None||None|
|Server / DC||PSEA - Play SQL Export Add-on||Free||None||None||None|
|Server / DC||SEO Manager||Free||None||None||None|
|Server / DC|
Play SQL Base
None since 3.1.2(4)
|Server / DC||Play SQL Spreadsheets||Free||None||None since 3.1.2(4)||None|
|Server / DC||Play SQL Forms||Free||None||None||None|
|Server / DC||ReqIF extension for Requirement Yogi||Free||None||None||None|
(1) As defined in Atlassian Marketplace Publisher Agreement, section §8.4: Generally the company name, country, address, technical email, licensing email, reseller details, license number, etc.
(2) Free text may contain PII if users have entered any.
(3) PII: Personally identifiable information (user names, email, phone number, etc).
(4) There used to be a feedback job in Play SQL Base and Play SQL Spreadsheets. This feedback job was removed in version 3.1.2 (see the history of this page).
Requirement Yogi is currently a sole-trader company (company type "SASU" in France) with:
There are special situations where external people may have access to the data:
Here is what we allow:
|Information||Founder||Employees under confidentiality agreement||Contractors||Accountant|
Please see our Security Policy.
We try to delete data as early as possible, except for backups which we keep a little longer.
License information is provided to us by Atlassian every time we need it.
If Atlassian starts limiting the history, then we will store it for up to 2 years, mainly for accounting purposes.
|User-created data in our Cloud apps|
We delete data from the active databases as soon as the addon is uninstalled.
We keep a backup of customer data for up to 2 months.
Our products are generally hosted by Amazon AWS and Digital Ocean, except our website which is managed by OVH, France. The computers we use to create software and access your information are located in France.
|Type||Product||Where it is hosted||Link||Data Processing Addenum|
|Cloud products||Requirement Yogi||Amazon AWS||https://aws.amazon.com/service-terms/||Part 1.14 of their ToS|
|Web||Our website||OVH, France||https://www.ovh.com/fr/protection-donnees-personnelles/||Part 2 of their ToS|
|Mailing lists||All||MailChimp, USA|
|Fastmail||Fastmail, Australia / USA.||https://www.fastmail.com/help/ourservice/security.html|
Encrypted backups of our administrative documents, invoices, work documents.
|Desktop||Our computers, our company, etc.||Encrypted laptops, desktops and hard drives, France.||-|
We plan to use Amazon Web Services in the future for several of those services.
You have a right to access the personal information we collect and correct it. Most of the processes are automated:
Accurate on February 15th, 2022:
This information is subject to change in case of architectural change: if we decide to migrate the app to another provider, or if we decide to change databases inside of AWS, or if we decide to add/remove availability zones, or if we decide of another architecture. In any case, we will ensure that the data is encrypted at rest.
The data that the app stores is subject to constant changes depending on features we develop. For the moment, the data is:
If any process is not automated or you do not know how to exercise your rights, you may exercise them by contacting Adrien Ragot at:
Requirement Yogi - Responsable GDPR
535 route des Lucioles
Les Aqueducs B3
06560 Sophia Antipolis
We may update this policy without notice, for the purposes of being more specific, reflecting a new practice or complying to legal requirements.