Version: 11 September 2026. Applicable to Leaver Guard orders incorporating this document. Noé Pérez Blanco (NoeApps), identified in the legal notice, is the provider.
Parties, purpose, and term
The customer is the controller or confirms it is authorized to appoint NoeApps as a subprocessor. NoeApps processes data on the customer's instructions to provide the functions in the guide: reviewing responsibilities and preparing and verifying authorized Jira handovers. Processing continues while the service is provided and through subsequent deletion under the Forge lifecycle.
Data and people
Identifiers of administrators, users, and resources, and the content and metadata detailed in the privacy policy, may be processed. They may concern employees, collaborators, and people mentioned in content. The customer determines scope and legal basis, limits information to what is needed, and avoids unnecessary special categories of data.
Instructions and confidentiality
NoeApps processes data only to provide, protect, and maintain documented functions under lawful customer instructions, including transfer instructions. If law requires other processing, NoeApps will inform the customer beforehand unless prohibited. It will notify the customer of any instruction it considers unlawful. Authorized personnel are bound by confidentiality and minimum necessary access.
Security
The documented safeguards include Forge compute and storage, installation isolation, server-side administrator checks, Atlassian-managed credentials, and read, preview, and verification controls before and after writes. NoeApps does not use content for advertising, data sales, or model training.
Providers and transfers
Atlassian provides Forge and product APIs. DonDominio provides support email for data the customer voluntarily sends. The customer authorizes these providers for those purposes. NoeApps will give reasonable advance notice of planned provider changes and allow grounded objections. Providers acting as subprocessors will have equivalent obligations; NoeApps remains responsible for its own obligations. Storage location depends on Forge and product settings. Where international transfer rules apply, valid safeguards, including standard contractual clauses when appropriate, must be in place. This agreement does not promise an exclusive location or replace Atlassian's commitments to the customer.
Rights, risk assessment, and incidents
NoeApps will proportionately assist the customer with rights requests, security, impact assessments, and regulator inquiries, considering the processing and available information. It will notify the customer without undue delay of personal data breaches for which it is responsible and provide known information needed for investigation and notification duties. Requests about organizational data will be verified with the organization's administrator.
End of service and audit
At termination, at the customer's choice, NoeApps will help return or delete data under its control unless law requires retention. The customer must request return before uninstalling; the app's history export is limited and not a full backup. Retention and cleanup follow the privacy policy. Changes already written to Jira or Confluence remain in those products. NoeApps will provide information and cooperate with reasonable audits to demonstrate compliance while protecting other customers' information.
Customers subject to CCPA/CPRA
Where applicable, NoeApps acts as a service provider for the specific purposes of this agreement. It will not sell or share data for behavioral advertising, use it outside these purposes or the direct business relationship except where legally authorized, or combine it with other sources except as permitted. It will maintain the required protection level, notify the customer if it cannot meet these duties, and allow reasonable measures to verify, stop, or remedy unauthorized use.
Contact
Privacy requests: privacy@noeapps.com. Technical incidents: support@noeapps.com.