Privacy policy

How we handle personal data on our website and in our apps. The short version: our Atlassian apps run inside Atlassian Cloud and their content never reaches us. Asset Sync, our add on for Google Sheets™, works differently, and section 3 explains exactly what it stores and why. In every case, we collect as little as we can.

LaunchPad and Second Chance process your Atlassian data inside Atlassian Cloud. None of that content is sent to LT.Solutions infrastructure or to third parties by those apps.

Asset Sync uses infrastructure operated by us. It stores only the connection information and saved import definitions required to provide the service. Assets object data passes through the service during an import and is written into the Google spreadsheet you choose. We do not retain that object data after the import completes.

1. Who is responsible

Let’s Talk Solutions Ltd, registered in England and Wales and trading as LT.Solutions, is the data controller for personal data described in this policy.

For any privacy question, email privacy@lt.solutions.

Our apps covered by this policy include:

• LaunchPad for Jira Service Management.
• Second Chance for Jira Service Management.
• Asset Sync, a Google Workspace™ Marketplace add on that imports Jira Service Management Assets data into a Google spreadsheet.

Where an app processes data belonging to an organisation using that app, that organisation remains the controller of its data. LT.Solutions acts as a processor only for the limited processing required to provide the relevant service.

2. What we collect

On our website and through direct contact, we may collect:

• Contact details you give us, such as your name, email address, and company, when you email us or ask for documentation.
• The content of your message, so we can understand and answer it.
• With your consent, analytics about how the website is used through Google Analytics 4, or GA4.

GA4 sets cookies and identifies your browser using a pseudonymous identifier rather than your name or email address. It only runs after you accept analytics cookies.

Some analytics data may be processed by Google outside the United Kingdom, as explained in section 5.

We do not use analytics data for advertising or remarketing, and we do not sell personal data.

If you decline analytics cookies, GA4 does not load and you can still use the website.

3. How our apps handle data

LaunchPad and Second Chance

LaunchPad and Second Chance run entirely within the customer's Atlassian Cloud environment using the Atlassian Forge platform.

For these apps:

• They read and process Atlassian data, such as requests, Assets data, configuration information, and knowledge content, within Atlassian Cloud.
• That content is not copied to servers operated by LT.Solutions.
• We do not operate an independent application backend in the data path for these apps.
• Second Chance compares request content against your Confluence knowledge base without sending that content to an external artificial intelligence or large language model service. Its matching is deterministic.
• The apps use Atlassian authentication and permissions. We do not collect Atlassian API tokens or create separate user logins for them.

Your use of Atlassian products is also covered by Atlassian's own privacy notice, which applies to the platform on which these apps run.

Asset Sync

Asset Sync is an add on that runs inside Google Sheets™. It reads objects from Jira Service Management Assets and writes them into a spreadsheet you choose.

Version 1 is a one way import. It reads from Assets and writes to your spreadsheet. It does not write back to Jira or Assets.

Unlike our Forge apps, Asset Sync uses a backend service operated by LT.Solutions and hosted on Google Cloud™ in the United Kingdom, in the London region.

Your use of Google services is also subject to Google's Terms of Service, the Google Workspace™ Terms of Service, and the Google APIs Terms of Service.

Google user data

When you connect your Google account, Asset Sync requests access required to provide the service.

This includes:

• Identity information. Your Google account ID and email address are used to associate your authorised connection and saved imports with you. We do not use them for another purpose.
• Spreadsheet access. Asset Sync uses its authorised access to create tabs and write rows in the spreadsheet you choose as an import destination. It accesses a spreadsheet only to the extent required to create, write, or refresh an import you have configured. It does not access spreadsheets you have not selected for use with the service, and spreadsheet content is not used for any other purpose.

Asset Sync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, sell Google user data, or allow humans to read it except:

• With your permission when required to provide support.
• Where necessary for security purposes.
• Where required by law.

Atlassian data

When you connect your Atlassian account, Asset Sync reads Jira Service Management Assets data on your behalf.

Depending on the import you configure, this may include:

• Assets schemas.
• Object types.
• Attribute definitions.
• Objects and object attributes that your Atlassian account has permission to access.
• Results selected by the filters or queries you configure.

Assets object data passes through our service transiently while an import is running and is written directly into the Google spreadsheet you selected.

We do not retain imported Assets object data on our servers after the import completes.

What we store

To maintain authorised connections and saved imports, our service stores limited configuration data in a restricted Google Cloud Firestore database.

This includes:

• OAuth refresh tokens for your authorised Google and Atlassian connections.
• Saved import definitions, including the schema, object types, columns, filters, destination spreadsheet, and relevant refresh configuration you selected.

OAuth tokens are never written to application logs.

Asset Sync refreshes when you ask it to. It does not refresh in the background, so a stored OAuth token is used only while you are working in the spreadsheet.

Deletion

Disconnecting an account through Asset Sync deletes the stored OAuth tokens associated with that connection.

Deleting a saved import deletes its stored definition.

You can also email privacy@lt.solutions and ask us to remove the records associated with your account.

Data that Asset Sync has already written into your Google spreadsheet remains in that spreadsheet and is not removed when you disconnect Asset Sync or delete an import.

Sharing

We do not share Asset Sync data with third parties for their own purposes.

The service communicates with Google APIs and Atlassian APIs as required to provide the service.

Asset Sync does not use third party advertising or tracking services, and imported customer data is not sent to an artificial intelligence or large language model service.

Google Sheets™, Google Workspace™, and Google Cloud™ are trademarks of Google LLC. Asset Sync is not affiliated with or endorsed by Google LLC.

4. Why we process it

We process personal data where necessary to:

• Reply to enquiries.
• Provide and support our apps.
• Maintain authorised account connections.
• Perform imports and other functions you request.
• Meet our legal and security obligations.
• Maintain and improve our services.

Depending on the circumstances, our lawful basis under UK data protection law may be your consent, performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and securing the business and its services.

Where we rely on consent, you can withdraw it.

5. Who else is involved

We keep the number of providers involved in processing data as limited as practical.

Atlassian hosts the Forge platform used by LaunchPad and Second Chance and provides the Atlassian APIs used by our apps. Atlassian also handles Marketplace services for apps distributed through the Atlassian Marketplace.

Google Cloud hosts the Asset Sync backend service and its storage in the United Kingdom.

We also use established providers for functions such as email and website hosting.

Where a provider processes personal data on our behalf, it does so under contractual terms requiring it to protect that information and use it only to provide the relevant service.

Website analytics

If you accept analytics cookies, Google processes the website usage data described in section 2 through Google Analytics 4.

This may involve transferring personal data outside the United Kingdom, including to the United States. Google provides contractual and organisational safeguards intended to meet applicable UK data protection requirements for those transfers.

You can withdraw your analytics consent at any time using the Cookie settings control on our website.

6. How long we keep it

We keep contact and enquiry data for as long as reasonably necessary to respond to your request, maintain an appropriate business record, and meet any applicable legal obligations. We then delete or anonymise it where appropriate.

For LaunchPad and Second Chance, customer operational data is not retained by LT.Solutions because those apps process it within the customer's Atlassian environment.

For Asset Sync, we retain authorised connection information and saved import definitions only for as long as they are required to provide the service.

Connection tokens are deleted when the relevant connection is disconnected or when deletion is requested.

Saved import definitions are deleted when the import is deleted or when deletion is requested.

Assets object data passing through the service during an import is not retained after the import completes.

7. Your rights

Under UK data protection law, depending on the circumstances, you may have the right to:

• Ask for access to personal data we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete personal data.
• Ask us to restrict processing.
• Object to certain processing.
• Receive certain information in a portable format.
• Withdraw consent where processing is based on consent.

To exercise your rights, email privacy@lt.solutions.

We will respond within the period required by applicable law.

You also have the right to complain to the Information Commissioner's Office if you believe your personal data has been handled unlawfully.

8. Changes

We may update this policy when our services, practices, or legal obligations change.

When we do, we will update the date at the top of this page.

If a change materially affects how we process personal data, we will take reasonable steps to make that change clear.

9. Contact us

For privacy or personal data questions, email privacy@lt.solutions.

For general questions, contact us through the contact options provided on lt.solutions.