Privacy Policy

This privacy policy governs how we treat the information and data provided by our customers when using MoroSystems Orchestra, s.r.o. commercially available software products, including Atlassian Server Products, Atlassian Data Center Products, Atlassian Cloud Products, Monday Products any related support or maintenance services, analytics data and documentation provided by MoroSystems Orchestra.

Data security and privacy policy

Terms and scope

This policy covers all self-hosted and cloud-based software products “apps” and interactions with the MoroSystems Orchestra support service. "You" means the end-user of our apps or the legal entity that is the licensee of our apps.

Under the terms of GDPR, MoroSystems Orchestra is a Data Processor. This document lists the services we contract to serve as subprocessors. It also describes how we treat your information and data when you use our apps or contact our support service. You accept the practices outlined in this policy by using any of those.

Installing and using MoroSystems Orchestra apps or contacting our support service may involve processing your data. End-user data processing is governed by the MoroSystems Information on data processing.

Data collected and shared with subprocessors

 

Atlassian Server and Data Center apps

Our Server and Data Center apps store all information in the corresponding instance of Atlassian product (Jira, Confluence, …).

No information stored on the installation IT system is made available to us when you install the app. The app does not transmit data from your IT system or from the end-user's web browser to us or to any third party.

Atlassian Cloud apps

We use Amazon Web Services (AWS) as the hosting provider for our Atlassian Connect cloud apps. We use the eu-central-1 region, which means that your data is processed on servers in Frankfurt, Germany. No sensitive customer data is stored on AWS servers.

  • We store only the minimal information required for Atlassian Connect and Atlassian Forge authentication. It includes the client key, instance URL and basic information on the app's installed status and date of installation.

  • All data that is processed by the app is completely kept within the boundaries of the AWS infrastructure. Therefore, all information exchange is protected by AWS itself:

    • All data is securely stored in AWS DynamoDB and AWS S3.

    • All logs are written to AWS CloudWatch logstreams and New Relic Services.

    Note that all these components respect the official Amazon and New Relic security guidelines.

Monday apps

We use Google Cloud Platform (GCP) as the hosting provider for our Monday apps. We use the europe-west3 region, which means that your data is processed on servers in Frankfurt, Germany. No sensitive customer data is stored on GCP servers.

  • We do not store any information for Monday authentication.

  • All data that is processed by the app is completely kept within the boundaries of the GCP infrastructure. Therefore, all information exchange is protected by GCP itself:

    • All data is securely stored in GCP Datastore.

    • All logs are written to GCP Operations logstreams.

    Note that all these components respect the official GCP security guidelines.

 

End-users access the front-end web app in a secure way, using HTTPS. Therefore, all data exchange over the public internet is encrypted.

MoroSystems Orchestra Customer Support

When having problems or questions related to our apps, you may contact our Customer Support team. Depending on the issue we may request log files, configuration files, screenshots or other technical information, which you are free to give to us.

Those are only used to analyze and solve your individual issue.

We use Atlassian Jira Service Management to provide technical support for our customers. When you create a ticket in our support system, the information provided may be transferred and stored on Atlassian Jira Service Management servers that are in the Europe.

Check SCCs published by Atlassian.

Mailing lists

Your contact data provided by the Atlassian Marketplace or Monday Marketplace over the course of evaluating or purchasing our apps will be used to send relevant information to you via email. We do not have any access to customer data beyond this.

We store customer email addresses and names in the Atlassian Marketplace servers. This service is fully compliant with GDPR. Check SCCs published by Atlassian.

If you decide you do not need further information, you may simply unsubscribe by clicking the link in the email's bottom part or contact us on at atlassian@morosystems.cz.

Data privacy rights

Opting Out of Receiving Communications, Correcting or Deleting Your Personal Information. You may opt out of receiving communications from us. We typically hold your email address and name for communications purposes stated above. If you believe any information, we are holding on you is incorrect or incomplete, please email us at atlassian@morosystems.cz. You may also request that we delete the information we hold about you.

Accessing your Personal Information. You may request to access the information we hold about you or the past support request correspondence with you. Contact us at atlassian@morosystems.cz.

3rd Party Domains

Our service utilizes a selection of trusted third-party tools to understand and enhance user experience and functionality. These tools play a crucial role in helping us provide a seamless and efficient service. We would like to transparently disclose that we employ the following third-party tools:

  • Google Services. We use Google Analytics and Google Ads to measure and evaluate customer behavior when using our apps and visiting our app pages on the Atlassian Marketplace or Monday Marketplace.

    • This service will be gradually discontinued.

  • YBug Services. Use is entirely voluntary. We use the YBug tools as an additional option to give us feedback or report a found bug. Depending on the issue, we may store log files, other configuration files, screenshots, or technical information you provide to us.

    • This service will be gradually discontinued.

  • New Relic Services. We use New Relic tools to analyze application logs, security prevention, and bug fixes.

    • This service will be gradually discontinued.

  • Mixpanel Services. We use Mixpanel to measure and evaluate customer behavior when using our apps. We measure and store user behavior data such as which features they use, how they use them, how often. We never store personal, corporate or sensitive data. Measurement by this service can be completely disabled in your Atlassian product settings.

    • This service is gradually replacing Google Services.

  • Refiner Services. Use is entirely voluntary. We use the Refiner tools as an additional option to give us feedback. We may store information you provide to us.

    • This service is gradually replacing YBug Services.

Disclosure

The collected information may be disclosed only if we are required to do so by law.

Amendments

This policy was last updated in May 2026.