Reference
Permissions, data, licensing
Chatline is an Atlassian Forge app. It runs on Atlassian's platform; the only place it sends data to is the Google Chat spaces you connect.
Jira permissions
| Permission | Why |
|---|---|
read:jira-work | read the changed issue and comment, check JQL filters |
read:jira-user | show who made a change, and tell people from apps and automation |
storage:app | keep the settings of the connected spaces |
Chatline never changes anything in Jira. Only Jira administrators can open its settings.
What goes to Google Chat
For each change a space subscribed to: the issue key and summary, the kind of change and who made it, status, priority, assignee and project for new issues, the extra fields you chose, and the comment or description text if those options are on. Digests, sprint and release messages list issue keys, summaries, statuses, assignees and due dates. Jira Automation rules send the text their authors wrote. Everything is sent over HTTPS to chat.googleapis.com, to the webhook URL of that space only.
What Chatline stores
- The settings of each space: name, JQL filter, chosen changes and options.
- The webhook URL of each space, in Forge secret (encrypted) storage. It is never shown again or logged.
- Per space: how many messages were sent and failed, the last error, and the date of the last daily digest.
Issue content is not kept. With bundling on, the changes of an issue wait in Forge storage for about a minute (at most five) until they are posted together, then they are deleted. They hold account IDs, never names or email addresses; names are looked up in Jira when the message is posted. While a message waits for a retry it sits in the app's Forge queue for at most about 15 minutes. Logs contain counts only, never issue text, keys or names. When the app is uninstalled, Atlassian deletes its Forge storage according to the Forge data retention policy.
Licensing
Chatline is a paid app with a free trial. When the license of a site is not active, nothing is posted and the settings are kept. See the privacy policy and the terms.
Contact
Questions or a security report: support@yti.digital. YTI Digital OÜ, Estonia.