Effective and last updated: September 1, 2026
This policy explains how Seena Sabti, an individual based in Maryland, United States (“Provider,” “we,” or “us”), handles personal information through Accord Quality Operations for Jira Service Management (“Accord”), the Accord support service, and this website. “Accord” is the current product name and is not a separate legal entity.
For information a customer places in the installed app, the customer normally decides why and how the information is used and Provider acts as its processor or service provider. For support correspondence, security reports, website administration, and Provider’s legal obligations, Provider acts as an independent controller or business.
Information the installed app processes
Accord keeps the following information for the Jira site where it is installed:
- Atlassian account IDs: unique codes Atlassian uses to identify administrators, reviewers, support team members, and people who make changes. Accord does not use email addresses to identify these people.
- Review settings: the plans, schedules, and Jira search rules created by an administrator.
- Review forms: the questions, rating choices, scoring rules, and passing score.
- Review records: assignments, scores, reviewer notes, supporting references, and reasons a review was marked as not counted.
- Ticket references: the ticket number or key and the identifying number of its Jira project.
Jira information viewed but not copied
While an authorized person is reviewing a ticket, Accord requests selected ticket fields directly from Jira in that person’s Jira permission context. The installed app does not copy ticket descriptions, comments, attachments, customer messages, customer email addresses, or complete tickets into its review records.
Support requests
When you use the Accord support portal, Atlassian’s Jira Service Management stores the email address connected to your support account and the information you choose to submit. This information is separate from the Accord app installed on your Jira site and is used to respond to and track your request.
Do not submit Jira ticket descriptions, customer messages, customer email addresses, attachments, reviewer notes, passwords, access tokens, or complete Jira search rules.
Website visits
This is a static website hosted by Netlify. Accord does not run its own analytics, advertising trackers, user accounts, or contact forms on this site. Netlify nevertheless processes ordinary web-request information needed to deliver and protect the site, which may include an IP address, browser and device information, requested page, referring page, and request time. Netlify handles that information under its privacy statement and service terms.
Why information is used
Installed-app information is used to choose tickets, assign and complete reviews, calculate scores, show results, enforce permissions, keep an audit history, secure the service, diagnose faults, and comply with applicable law. Support information is used to authenticate requesters, communicate with them, investigate and resolve requests, prevent abuse, and keep a reasonable support history. Website request information is used by Netlify to deliver, secure, and operate the site.
Where Provider acts as a controller and a legal basis is required, processing is based on performing the agreement, Provider’s legitimate interests in operating and securing Accord and responding to requests, compliance with legal obligations, or consent where law specifically requires it. Customers are responsible for choosing and documenting the legal basis for personal information they direct Accord to process.
Sharing and subprocessors
Accord does not sell personal information, share it for cross-context behavioral advertising, use it for advertising, or send installed-app customer data to AI providers. It does not use installed-app customer data to train machine-learning models.
- Atlassian: hosts Accord’s Forge functions and storage, supplies Jira APIs, enforces data-residency controls, and hosts the separate support portal. Atlassian and its authorized subprocessors process this information under the applicable Forge, Atlassian, Marketplace, and data-processing terms.
- Netlify: hosts only this public website and processes ordinary website request data. Installed-app and support-request content is not sent to Netlify.
- Legal and safety disclosures: information may be disclosed when reasonably necessary to comply with law, respond to valid legal process, protect rights or safety, investigate abuse, or complete a business transfer subject to appropriate safeguards.
The Data Processing Addendum identifies subprocessors and processing details for installed-app customer data.
Location and international transfers
Accord uses Forge persistent storage. When an eligible customer pins its Atlassian product data to a supported location, Atlassian pins Accord’s in-scope stored data to the corresponding location. Forge compute and authorized subprocessors may process data in other locations as Atlassian describes. Applicable transfer safeguards are addressed in the Accord DPA, the Forge DPA, and Atlassian’s published transfer materials.
Retention and deletion
Finished reviews remain in the review history so past results are not silently changed. Accord regularly checks for Atlassian accounts that have been closed. It removes closed accounts from the list of people who can use Accord and from private notes. If an old review must remain in the history, Accord replaces the closed account ID with a value that does not identify the person.
A Jira site administrator can uninstall Accord. Atlassian currently soft-deletes Forge-hosted app data and retains it for 28 days after uninstall before deletion under its hosted-storage lifecycle. A customer that needs recovery must give consent and ask Provider early enough for Provider to submit Atlassian’s recovery request within 21 days of uninstall. These platform periods can change if Atlassian changes its service.
Support requests are kept only as long as reasonably needed to respond to and document the request, protect Accord and its users, resolve a dispute, or meet a Marketplace or legal obligation. They are then deleted or de-identified. The period depends on the request and any applicable obligation. You may ask for earlier deletion, although some information may need to be retained for the reasons above. Netlify determines retention for website request data it processes as the hosting provider.
Security
Provider uses the measures described in the Security Statement. No transmission or storage system is completely secure, and Provider cannot guarantee absolute security.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to appeal or complain to a regulator. You may also use Atlassian’s account privacy tools.
For installed-app information, contact your organization first because it normally controls that information. Provider will assist the organization where required. You may also email privacy@accordquality.com. We may need to verify your identity and authority before acting. Some information may be retained where law permits or requires it, including to protect security, audit integrity, and legal rights.
Accord does not sell or share personal information for targeted advertising, so it does not offer a sale or sharing opt-out. Accord also does not use personal information for automated decisions that produce legal or similarly significant effects.
Changes
We will update this page when Accord’s data practices or legal requirements change and revise the effective date above. If a change materially affects how installed-app customer data is used during a paid term, Provider will give notice as required by the customer agreement or law.
Contact
Email privacy@accordquality.com or submit a privacy request through the Accord support portal. Provider is Seena Sabti, the individual Marketplace partner identified in Accord’s listing and order.