Filter Exposure Guard

Filter Exposure Guard - Privacy Policy

Last updated: 2026-06-22

Filter Exposure Guard (the “app”) is provided by Aria Code. This policy explains what data the app accesses, why, how it is stored and shared, how long it is kept, and how to contact us. Our security practices are described separately in our Security Policy.

What we collect and why

Filter Exposure Guard is a read-only security-audit tool for Jira Cloud. It reads:

  • Filters and dashboards, names, share permissions, edit permissions, and JQL, to detect over-broad (public / org-wide) sharing and invalid JQL.
  • The owner of each filter/dashboard (account ID and display name) and whether that account is active, to flag stale (deactivated) owners.

It does not read descriptions, comments, attachments, or other detailed issue content. It reads owner account IDs and display names only to report ownership; it does not build user profiles.

How it is stored and used

The app runs on Atlassian Forge and uses Forge-hosted storage only for a small list of item IDs for which an administrator has dismissed a warning. Owner names are read and displayed in the audit but are not stored. Data is used solely to operate the app; never for advertising or model training.

Sharing and subprocessors

We do not sell or share your data. The app makes no third-party network calls and transmits no data outside Atlassian. The only subprocessor is Atlassian (Atlassian Forge), which hosts and processes data within its cloud platform on our behalf. No other third parties or subprocessors.

Data retention and deletion

Dismissed-warning data persists until an administrator restores the warning or uninstalls the app. Uninstalling deletes the app’s Forge storage data. You may also request deletion by emailing us.

Your rights

For access or deletion requests, contact hello@ariacode.dev.

Permissions

  • read:jira-work, list filters and dashboards, validate JQL.
  • read:jira-user, read whether an owner account is active.
  • storage:app, store dismissed-warning preferences.

The app makes no changes to your Jira.

Data residency

Stored data resides in Atlassian Forge storage, subject to Atlassian’s data residency model.

Contact & changes

Questions or requests: hello@ariacode.dev. We may update this policy and will revise the date above when we do.