Last updated: 2026-10-20
This policy covers the Jira Cloud and Jira Service Management app “Email Attachment Viewer for Jira” (the “app”), provided by Achref Heraghi, trading as Ironmile (“we”, “us”). Contact: support@ironmile.dev.
The app adds a panel to the Jira issue view that opens .msg and .eml attachments as readable emails. It is built on Atlassian Forge and is designed to run on Atlassian’s infrastructure (“Runs on Atlassian”). We do not operate any servers, databases or services for it.
Nothing. The app stores no email content and has no database. Nothing is cached. Its logs hold sizes, timings and status, never email content.
The only scope requested is read:jira-work. The app never writes to Jira. It fetches an attachment as the signed-in user, and only if it belongs to the issue being viewed, so a user who cannot see an attachment cannot open it through the app.
Nothing. We do not receive, log or read your emails, attachments, users’ names or email addresses. The app contains no analytics, tracking, advertising or cookies of its own.
Nothing. The app makes no calls to servers outside Atlassian and sends no data to us or to third parties. We use no subprocessors.
Email HTML is sanitised and shown in a sandboxed frame without scripts. Remote images are blocked, so tracking pixels do not fire. If you click a link in an email, Jira first asks whether to leave Atlassian; only then does the link open in a new browser tab. That visit is made by your browser, not by the app.
Emails can contain personal data written by third parties. The app only displays it to the signed-in user who opened it and does not process it further. Attachments remain in Jira, held under your Atlassian agreement and handled by Atlassian as described in Atlassian’s privacy policy.
The app keeps no data, so there is nothing to retain. Attachments stay where your Jira site’s data resides.
Atlassian handles billing and license status. We see what Marketplace shows a vendor about sales and licenses (such as the site name, license type and tier), under the Atlassian Marketplace Partner Agreement. We use it for support and accounting only.
If you contact us, we receive your email address and whatever you send. We use it to reply and delete it on request. Please do not send email content or attachments you consider sensitive.
For data stored in Jira, contact your Jira site administrator or Atlassian. For data from support requests, write to support@ironmile.dev to ask for access or deletion.
If the app ever changes what it stores or sends, we will update this policy before the release and describe the change in the release notes. Adding an external connection or a new permission would also require new admin consent in Jira.
Achref Heraghi, trading as Ironmile, support@ironmile.dev, https://ironmile.dev/email-viewer/support