Skip to content

Dwell

Dwell Privacy Policy

Dwell is an Atlassian Forge app that runs entirely inside your own Atlassian cloud environment. This policy describes what it reads, what it stores, and what leaves your tenant — which is nothing.

Effective
12 July 2026
Vendor
Hullara
App
Dwell — Time in Status, Cycle & Lead Time for Jira
Platform
Atlassian Forge · Runs on Atlassian

Summary

Dwell (“the App”) is an Atlassian Forge app that participates in Atlassian's Runs on Atlassian program. It runs entirely inside your Atlassian cloud environment. It does not send your data to Hullara's servers or to any third party — there are no external servers, no analytics calls, and no data egress.

Data we access

The App reads only the data required for its features, using the granted Atlassian scopes:

ScopeWhy it is needed
read:jira-workRead your Jira issues and their change history — to compute time in status, cycle time and lead time.
read:jira-userRead user display names — to populate the assignee filter with readable names.
storage:appStore the computed index and your app settings.

It accesses this data on your behalf, within your Atlassian tenant, and only to compute the features you use.

Data we store

To make reports fast, the App stores derived, computed data — for example, per-issue status-duration rollups, the issue's assignee reference (Atlassian account ID) for grouping, and app configuration — in Atlassian-hosted Forge storage, which lives inside your Atlassian cloud environment and inherits its data-residency region. We do not copy your data outside Atlassian.

Data we do not collect

We do not sell, rent, or share your data. We do not use it for advertising or to train machine-learning models. We do not receive a copy of it — it never leaves your Atlassian tenant.

Sub-processors

None beyond Atlassian itself, the platform hosting the App. Because the App runs on Atlassian with no egress, no additional sub-processors are involved.

Security

The App inherits Atlassian's platform security controls, including SOC 2 Type II and ISO/IEC 27001, and Atlassian's data-residency options. Reports are resolved using the requesting user's own permissions, so users only ever see data they are already authorized to see in Atlassian.

No egress, by construction. Dwell's Forge manifest declares no external permissions and no web triggers. There is no code path that can send your issue data anywhere outside your Atlassian tenant — this is enforced by the platform, not by policy alone.

Data retention and deletion

Derived and configuration data is stored only while the App is installed. Uninstalling the App removes the App's stored data from your Atlassian environment.

Children

The App is a business tool and is not directed to children under 16.

Changes

We may update this policy; material changes will be reflected here with a new effective date.

Contact

Questions or data requests: [email protected]