The information collected by Play SQL, Requirement Yogi and other products, comes from:

This is our privacy policy for all our apps and websites, as of October 2nd, 2019. By using our products:

Contents:

What information we collect

We mostly gather information through support cases. We also receive information from Atlassian through licenses ("Atlassian-collected end-user data"), Jira support issues, and from Google Analytics which we use our websites.

We host data created by users in our Cloud apps.

We don't gather any data when apps are installed by the customers on their own server, with the exception of the "feedback job" in Play SQL Base, explained in the table below.

How we use information we collect

We use the information to:

This includes:

What data is collected?

Data collected in the products

Atlassian defines:

Atlassian is not responsible for the privacy, security or integrity of Vendor-Collected End User Data.

ModeProductStatusFrameworkAtlassian-collected end-user data (1)

Vendor-collected end-user data (1)

Data containing PII(3)Other collected data, in normal usage
CloudRequirement YogiPaid

Atlassian Connect

using Atlassian's official ACSB.

The license subscription informationNoneApplication data(2) (the requirements, page IDs, page titles, Jira issues)
CloudRequirement Yogi for JiraPaidThe license subscription informationNoneApplication data(2) (the requirements text, page IDs, page titles, Jira issues)

Server / DC

Requirement Yogi

Paid






Atlassian P2 plugins

The license subscription informationNone

None

Server / DCRequirement Yogi for JiraFreeNoneNoneNone
Server / DCRY Testing & CompliancePaidThe license subscription informationNoneNone
DCRY-Comala integrationPaidThe license subscription informationNoneNone
Server / DCPSEA - Play SQL Export Add-onFreeNoneNoneNone
Server / DCSEO ManagerFreeNoneNoneNone
Server / DC

Play SQL Base

FreeNone

None since 3.1.2(4)

None

Server / DCPlay SQL SpreadsheetsFreeNoneNone since 3.1.2(4)None
Server / DCPlay SQL FormsFreeNoneNoneNone
Server / DCReqIF extension for Requirement YogiFreeNoneNoneNone

(1) As defined in Atlassian Marketplace Publisher Agreement, section §8.4: Generally the company name, country, address, technical email, licensing email, reseller details, license number, etc.

(2) Free text may contain PII if users have entered any.

(3) PII: Personally identifiable information (user names, email, phone number, etc).

(4) There used to be a feedback job in Play SQL Base and Play SQL Spreadsheets. This feedback job was removed in version 3.1.2 (see the history of this page).

What other data is collected?

How we share information we collect

Requirement Yogi is currently a sole-trader company (company type "SASU" in France) with:

There are special situations where external people may have access to the data:

Here is what we allow:

InformationFounderEmployees under confidentiality agreementContractorsAccountant
BillingYesNoNoYes
Application DataYesYesYesNo
Web AnalyticsYesYesNoNo
SupportYesYesNoNo

How we host and transfer data internationally

Security

Please see our Security Policy.

How long we keep information

We try to delete data as early as possible, except for backups which we keep a little longer. 

License information

License information is provided to us by Atlassian every time we need it.

If Atlassian starts limiting the history, then we will store it for up to 2 years, mainly for accounting purposes.

User-created data in our Cloud apps

We delete data from the active databases as soon as the addon is uninstalled.

We keep a backup of customer data for up to 2 months.

Our providers, where we keep information and how it is transferred internationally

Our products are generally hosted by Amazon AWS and Digital Ocean, except our website which is managed by OVH, France. The computers we use to create software and access your information are located in France.

TypeProductWhere it is hostedLinkData Processing Addenum
Cloud productsRequirement YogiAmazon AWShttps://aws.amazon.com/service-terms/(tick) Part 1.14 of their ToS
WebOur websiteOVH, Francehttps://www.ovh.com/fr/protection-donnees-personnelles/(tick) Part 2 of their ToS
Mailing listsAllMailChimp, USA

https://mailchimp.com/legal/privacy/

EmailFastmailFastmail, Australia / USA.https://www.fastmail.com/help/ourservice/security.html

(tick) Part of their ToS

Documents

Encrypted backups of our administrative documents, invoices, work documents.

SpiderOak, USAhttps://spideroak.support/hc/en-us/articles/360002173891-GDPR-and-SpiderOak
DesktopOur computers, our company, etc.Encrypted laptops, desktops and hard drives, France.-

We plan to use Amazon Web Services in the future for several of those services.

How to access and control your information

You have a right to access the personal information we collect and correct it. Most of the processes are automated:

Architecture and specific information for Requirement Yogi Cloud (Confluence and Jira)

Accurate on February 15th, 2022:

This information is subject to change in case of architectural change: if we decide to migrate the app to another provider, or if we decide to change databases inside of AWS, or if we decide to add/remove availability zones, or if we decide of another architecture. In any case, we will ensure that the data is encrypted at rest.

The data that the app stores is subject to constant changes depending on features we develop. For the moment, the data is:

Contact

If any process is not automated or you do not know how to exercise your rights, you may exercise them by contacting Adrien Ragot at:

Emailgdpr@r-yogi.com
Mail

Requirement Yogi - Responsable GDPR

535 route des Lucioles

Les Aqueducs B3

06560 Sophia Antipolis

France

How we update this policy

We may update this policy without notice, for the purposes of being more specific, reflecting a new practice or complying to legal requirements.

Change log:

Application

Our Privacy Policy applies to all of the websites and software offered by us. It excludes services offered by Atlassian or any other provider.

When we receive formal written complaints, we contact the person who made the complaint to follow up. In case of dispute, we seek the best amicable resolution. We may work with appropriate regulatory authorities to resolve complaints. The privacy policy is governed by the laws of France, and, subject to the following sentence, in case of dispute, the parties irrevocably and unconditionally submit to the exclusive jurisdiction of the courts of Lyon, France.