Daylight
← Back to Daylight

Privacy Policy — Daylight Time Tracking & Timesheets for Jira

Effective date: July 4, 2026

This Privacy Policy explains how Modul4r Solutions ("we," "us") handles data in connection with Daylight Time Tracking & Timesheets for Jira (the "App"), a time-tracking application for Atlassian Jira Cloud distributed through the Atlassian Marketplace.

1. The App runs entirely on Atlassian

Daylight is built on Atlassian Forge and runs inside Atlassian's cloud infrastructure. The App does not transmit your data to any servers operated by us or by any third party outside Atlassian. Your data is stored in Atlassian's hosted storage, within your Atlassian product's data-residency region. We do not operate external databases, analytics pixels, or integrations that move your data out of Atlassian.

2. What data the App processes

To do its job, the App processes:

  • Atlassian account identifiers and display names (account IDs and names) — to attribute time entries, timers, and settings to the correct user, and to show names to approvers and teammates in reports and timesheets.
  • Worklog and time data — issue identifiers, time spent, dates, and any note you add to a time entry. The authoritative worklog is stored in Jira's own worklog system; the App stores related metadata (e.g. timer state, draft entries, aggregates for reporting) in Atlassian Forge storage.
  • App configuration — settings you or your administrator choose (e.g. workday length, default visibility, and, in later versions, approval routing and rates).

The App does not process or store payment details (Atlassian handles all billing as merchant of record), passwords, or the contents of your Jira issues beyond what is needed to read and write the worklogs you track.

3. Why we process it (purpose and legal basis)

We process the above solely to provide the App's functionality: recording time, displaying your timesheet, generating reports, and the related features you enable. Where GDPR applies, the legal basis is performance of the contract between you/your organization and us (the App's terms), and our legitimate interest in operating and securing the App.

4. Where data is stored and who can access it

  • Storage: Atlassian Forge storage, within your Atlassian cloud and data-residency region.
  • Sub-processor: Atlassian (Atlassian Pty Ltd and affiliates), as the platform host. We use no other sub-processors. Atlassian's own privacy and security commitments apply to the underlying platform: https://www.atlassian.com/trust.
  • Our access: we do not have routine access to your time data. We may access diagnostic information only as needed to provide support you request or to resolve a technical fault.

5. Data retention and deletion

  • Data is retained while the App is installed and used.
  • When the App is uninstalled, Atlassian removes the App's stored data.
  • The App also runs Atlassian's required personal-data reporting and erasure cycle on a weekly schedule: it reports the account identifiers it stores and erases the data associated with any account that Atlassian reports as closed or anonymized, in line with Atlassian's privacy program.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, and to data portability — for example under Canada's PIPEDA and Alberta's PIPA (we are an Alberta, Canada business), the EU/UK GDPR, and similar laws. Because your data lives inside your organization's Atlassian environment:

  • Most requests are fulfilled by your Atlassian administrator directly in Jira, or by uninstalling the App.
  • You may also contact us at support@modul4r.com and we will assist, typically within 30 days.

7. Security

The App relies on Atlassian Forge's security model: hosted execution, scoped permissions (declared and shown to your administrator at install), and data residency. The App requests only the permissions it needs for the features you use, each justified on the Marketplace listing.

8. Children's data

The App is a workplace tool not directed to children and not intended to process children's data.

9. Changes to this policy

We may update this policy; material changes will be reflected by the effective date above and, where appropriate, noted in the App's changelog.

10. Contact

Modul4r Solutions, 18207 61 Ave NW, Edmonton, AB T6M 1T6, Canada — support@modul4r.com.