Data Processing Addendum

1. Parties and scope

This Data Processing Addendum ("DPA") applies to Churrie Works Inc. ("Churrie Works", "we", "us", or "our") and the organization or person using FormHub for Confluence and Jira ("Customer", "you", or "your"). It applies when Churrie Works processes End-User Data on behalf of Customer in connection with FormHub.

For purposes of applicable data protection laws, Customer is generally the controller or business for End-User Data submitted to or configured in FormHub, and Churrie Works is generally the processor or service provider for that End-User Data. Churrie Works may act as a controller for its own account, billing, security, support, and business records.

2. Definitions

End-User Data means data, content, or information about an end user that is accessed, collected, stored, or otherwise processed by FormHub in connection with the Atlassian Marketplace app.

Personal Data has the meaning given to it under applicable data protection laws, including the GDPR, UK GDPR, and similar privacy laws.

Customer Content means form definitions, form questions, submitted responses, attachments or attachment references, generated Confluence content, Jira issue data, workflow configuration, and related content provided by Customer or Customer's end users.

3. Categories of End-User Data processed

Depending on how Customer configures FormHub, the app may process the following categories of End-User Data:

• Atlassian account identifiers, display names, and email addresses where available through Atlassian permissions.
• Form definitions, field labels, help text, conditional rules, form settings, and saved form metadata.
• Submitted form responses, including free-text responses and any personal data that Customer chooses to collect through a form.
• Submitter metadata, submission timestamps, response identifiers, and operational metadata needed to display reports and exports.
• Access-control configuration for submitters and result viewers, including selected users, groups, and spaces.
• Confluence page creation or append data generated from submissions.
• Jira issue creation data, Jira field mappings, assignee or reporter references, labels, issue descriptions, and child-task configuration.
• Email notification recipient data and message content when email notifications are enabled.
• Integration payloads when Customer enables or configures workflow integrations.

FormHub is a configurable form product. Customer is responsible for deciding what information to collect and should not use FormHub to collect sensitive personal data unless Customer has a lawful basis and appropriate safeguards.

4. Processing activities and purpose

Churrie Works processes End-User Data to provide FormHub's app functionality, including:

• Rendering forms inside Confluence.
• Validating and storing form submissions.
• Displaying response reports, exports, and submission history.
• Creating or updating Confluence pages based on submissions.
• Creating Jira issues and follow-up Jira tasks based on form configuration.
• Sending configured notification emails.
• Applying customer-configured submitter and viewer access rules.
• Operating scheduled retention, archival, security, privacy, and reliability functions.
• Providing support, troubleshooting, abuse prevention, and app security.

5. Storage locations and infrastructure

FormHub is built on Atlassian Forge and primarily stores and processes app data within Atlassian apps and services, including Forge storage, Confluence, Jira, and Forge-hosted app functions. Some customer-configured features may send data outside Atlassian apps and services.

6. Customer instructions

Customer instructs Churrie Works to process End-User Data as necessary to provide FormHub, as configured by Customer, and as described in this DPA, the applicable Marketplace listing, product documentation, privacy policy, and any applicable order or written agreement.

If Churrie Works believes an instruction violates applicable data protection law, Churrie Works may notify Customer and suspend the affected processing until the issue is resolved.

7. Confidentiality and access

Churrie Works limits access to End-User Data to personnel and subprocessors who need access to provide, secure, support, or maintain FormHub. Personnel with access to End-User Data are subject to confidentiality obligations.

8. Security measures

Churrie Works uses reasonable technical and organizational safeguards appropriate to the nature of the app and the data processed. These safeguards include:

• Use of Atlassian Forge hosting, storage, authentication, and permission models.
• Least-privilege Atlassian app scopes where reasonably practicable for app functionality.
• Server-side enforcement of submitter and response-viewer access controls.
• Storage of app secrets using Forge secret storage where available.
• HMAC signing for supported workflow integration requests.
• Input validation, output escaping, and file-size limits for uploaded content.
• Scheduled lifecycle archival and clearing of stored submissions where configured by the app.
• Personal data reporting to Atlassian for stored Atlassian account identifiers as required by Atlassian Marketplace privacy requirements.
• Operational logging designed to avoid intentionally logging submitted form responses or unnecessary personal data.

9. Subprocessors

Customer authorizes Churrie Works to use subprocessors to provide FormHub. Churrie Works remains responsible for subprocessors it engages to process End-User Data on behalf of Customer.

Churrie Works may update this list from time to time. Material changes will be reflected on this page or in related customer notices.

10. International transfers

End-User Data may be transferred to, processed in, or accessed from countries outside the European Economic Area, the United Kingdom, or Switzerland, including the United States, depending on Customer's Atlassian configuration, Atlassian infrastructure, Churrie Works operations, and any optional email or workflow integrations enabled for the app.

Where required by applicable law, Churrie Works will rely on appropriate transfer mechanisms, which may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, subprocessors' transfer mechanisms, or other lawful transfer bases.

11. Deletion, return, and retention

Customer controls many deletion actions through Atlassian products, including deleting Confluence pages, Jira issues, attachments, and app installations. FormHub may retain app data in Forge storage as needed to provide response history, reports, access controls, lifecycle archival, and support.

Upon uninstall, expiration, or written request, Churrie Works will delete or return End-User Data within a reasonable period unless retention is required by law, security, billing, dispute resolution, backup, or legitimate business purposes. Data written into Confluence or Jira remains subject to Customer's Atlassian product configuration and deletion controls.

12. Assistance with privacy requests

Churrie Works will provide reasonable assistance, taking into account the nature of processing and information available to Churrie Works, for Customer to respond to data subject requests, security inquiries, and privacy obligations. Customers should send requests to customerService@churrieworks.com.

13. Security incidents

If Churrie Works becomes aware of a confirmed security incident involving End-User Data processed by FormHub, Churrie Works will notify affected customers without undue delay and provide information reasonably available to help customers meet their obligations. Security issues may be reported to customerService@churrieworks.com.

14. Audits and information

Churrie Works will make reasonable information available to demonstrate compliance with this DPA. To protect other customers and the app environment, audits must be reasonable in scope, scheduled in advance, and subject to confidentiality and security requirements.

15. CCPA and similar privacy laws

To the extent the California Consumer Privacy Act or similar laws apply, Churrie Works acts as a service provider or processor for Customer Content. Churrie Works does not sell End-User Data submitted through FormHub and does not use it for cross-context behavioral advertising.