Keepwell AppsData processing agreement
Last updated November 13, 2026.
This agreement is between Draco Ventures LLC, which trades as Keepwell Apps ("Keepwell"), and the organization that installs a Keepwell app from the Atlassian Marketplace ("Customer"). It is part of the terms and applies from the moment the app is installed. Nobody needs to sign it. If a Customer needs a signed copy, write to support@keepwellapps.com.
1. What this covers
"Customer Data" is the data a Keepwell app stores from the Customer's Atlassian site. Where Customer Data includes personal data, the Customer decides why and how it is processed, and Keepwell processes it for the Customer. Under the GDPR and the UK GDPR the Customer is the controller and Keepwell is the processor. Under the California Consumer Privacy Act the Customer is the business and Keepwell is the service provider.
Messages a person sends to Keepwell by email are not Customer Data. Keepwell handles them under its privacy policy. Please do not email the contents of issues.
2. Details of the processing
| Purpose | To show the Customer's admins which issues were deleted and to restore them. |
| What is done with the data | The app copies it, stores it, shows it to admins, writes it back to Jira on a restore, and erases it. |
| Personal data | Display names and Atlassian account IDs, and any personal data people have typed into issue fields, descriptions and comments. |
| Whose data | People who use the Customer's Jira site, and anyone the Customer's issues mention. |
| How long | For as long as the app is installed, within the retention period the Customer sets. The privacy policy gives the periods. |
3. What Keepwell agrees to
- Instructions. Keepwell processes Customer Data only as the Customer instructs. The Customer's instructions are the terms, this agreement, and what its admins do in the app. If the law requires Keepwell to do something else, Keepwell tells the Customer first unless the law forbids that.
- No other use. Keepwell does not sell or share Customer Data, and does not keep or use it for any purpose other than providing the app.
- Confidentiality. Anyone Keepwell allows to work on the app is bound to keep Customer Data confidential.
- Security. Keepwell keeps in place the measures described on the security page, and does not weaken them.
- Requests from individuals. The app gives the Customer's site admins the means to erase one person's name and account ID, or everything the app holds. If a person asks Keepwell directly to act on their data, Keepwell passes the request to the Customer and helps the Customer answer it.
- Help with the Customer's own duties. Keepwell gives the Customer the information it reasonably needs for data protection impact assessments and for dealings with a regulator, as far as these concern the app.
- Breaches. If Keepwell confirms that Customer Data was accessed, lost or changed without authority, it tells the Customer without undue delay and within 72 hours. The notice says what happened, what data was involved as far as Keepwell knows, and what Keepwell is doing about it. Keepwell sends it to the contacts Atlassian holds for the Customer's license.
4. Others who process Customer Data
The Customer agrees that Keepwell uses the following sub-processor:
| Sub-processor | What it does | Where |
|---|---|---|
| Atlassian Pty Ltd and its affiliates | Runs the app and hosts its storage on the Forge platform. | Where Atlassian hosts the Customer's site and its Forge data. |
Keepwell uses no other sub-processor for Customer Data. Before adding one, Keepwell updates this page at least 30 days ahead. A Customer that objects may stop using the app and uninstall it, which ends the processing. Keepwell stays responsible for what its sub-processors do with Customer Data.
5. Where the data is
Customer Data stays in Atlassian's cloud. The app sends it nowhere else and Keepwell does not receive a copy. Keepwell is based in the United States. If Keepwell ever needs to see personal data from the European Economic Area, the United Kingdom or Switzerland, for example in an error log a Customer shares with it, the European Commission's standard contractual clauses of 4 June 2021 (module two, controller to processor) apply to that transfer and are made part of this agreement, with the Customer as exporter and Keepwell as importer. For the United Kingdom, the UK Information Commissioner's international data transfer addendum applies with them. Sections 2 and 4 of this agreement and the security page supply the details the clauses ask for.
6. Checking that Keepwell keeps to this
Keepwell gives the Customer the information it reasonably needs to confirm that Keepwell is meeting this agreement, and answers a written set of questions about it once in any 12 months, or at any time after a breach.
7. When the processing ends
The Customer can erase everything the app holds at any time from the app's Settings tab. When the app is uninstalled, Atlassian deletes the app's stored data for that site under its retention rules for Forge apps. Keepwell holds no other copy to return or delete.
8. How this fits with the terms
Where this agreement and the terms disagree about personal data, this agreement applies. The limits on liability in the terms apply to this agreement, except where the law does not allow that. The law that governs the terms governs this agreement, except where the standard contractual clauses say otherwise.
Contact
Questions about this agreement go to support@keepwellapps.com. Security reports go to security@keepwellapps.com.