Effective date: October 21, 2026
Provider: QANetwork Inc, QANetwork Inc, 7586 Black Walnut Trail, Mississauga, Ontario L5N 8A7, Canada ("we", "us")
Privacy contact: privacy@testcase.pro
Company website: https://qanetwork.ca
1. Scope
This policy explains how we process data when you use Northline Test Management for Jira ("Northline"), an app for Atlassian Jira Cloud that is installed through the Atlassian Marketplace. These pages are published at https://jira.testcase.pro/privacy.
2. Data we process
When Northline is installed on your Jira site, it processes the following:
| Category | Examples | Source |
|---|---|---|
| Site identifiers | Atlassian cloud ID, Forge environment, installation ID, Jira site URL | Atlassian, at install time and on each request |
| User identifiers | Atlassian account IDs of users who create, edit, review or run tests | Atlassian (Forge invocation token) |
| Jira references | Project IDs and keys, issue keys and issue summaries that are linked to tests | Jira REST API |
| Content you create | Test cases, folders, steps, datasets, shared steps, reviews, cycles, plans, executions, comments, exploratory session notes, custom field values, saved filters | Your users |
| Attachments | Screenshots and files uploaded to test executions (up to 25 MB each) | Your users |
| Integration data | CI test results, MCP/agent audit logs, and API key names and scopes. We store only a SHA-256 hash of each API key, never the key itself. | Your CI systems and MCP clients |
| Public report links | A hashed token and its expiry for read-only reports that a user chooses to share | Your users |
| Operational logs | Error categories, request paths, and job IDs. Logs are not used to store names, email addresses, or Atlassian account IDs. | Generated by the service |
We do not collect Atlassian passwords or API tokens. We do not store user names or email addresses; users are referenced only by Atlassian account ID.
3. Why we process it
We process this data only to provide Northline's features: storing and showing tests, recording results, calculating coverage and analytics, and writing coverage back to Jira issues. We do not sell data and do not use it for advertising. Northline does not use product analytics.
4. Where data is stored and who processes it
Data is stored and processed on Cloudflare's global network (Workers, D1, R2, KV, and Queues). Data is encrypted in transit (TLS) and at rest. Northline does not offer regional data residency or pinning. Each Jira site's data is logically separated by its Atlassian cloud ID and Forge environment, so a development install and a production install on the same site do not share a ledger.
Sub-processors are Cloudflare, Inc. (hosting, database, and storage) and Atlassian (the Forge platform and Jira APIs). There are no other sub-processors.
5. Roles under GDPR
For customer content and user identifiers processed through Northline, the customer is the controller and QANetwork Inc acts as a processor. A data processing addendum is available on request at privacy@testcase.pro.
Where international transfers apply, we use Standard Contractual Clauses and Cloudflare's own transfer mechanisms.
6. Retention and deletion
- We keep data while Northline is installed on your site.
- During uninstall, Northline deletes that site's database rows, uploaded files, and site-specific cache entries for that Forge environment.
- Site admins can ask for deletion at any time by writing to privacy@testcase.pro.
- A weekly job reports stored Atlassian account IDs to Atlassian's personal data reporting API and anonymises identifiers for accounts Atlassian reports as closed.
7. Security
We use TLS 1.2 or higher, encryption at rest, Forge invocation token verification on every request from Jira, Jira permission checks for Forge users, hashed API keys, and HMAC-signed, time-limited links for attachments. Security issues can be reported to security@testcase.pro.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or object to the processing of your personal data. Contact privacy@testcase.pro. If we process your data on behalf of your organization, we will refer your request to your organization.
9. Changes
We will post updates on this page and change the effective date.
10. Contact
Manivannan Gajendran
QANetwork Inc
7586 Black Walnut Trail
Mississauga, Ontario L5N 8A7
Canada
privacy@testcase.pro
https://qanetwork.ca