
Data Security and Privacy Statement
Data Security and Privacy Statement
Flower BPM is an Atlassian Connect application for Jira and Confluence.
We take data security and privacy seriously and follow GDPR (General Data Protection Regulation) standards as a European company.
Data Residency: Where is Your Data Stored?
Flower does not store any data externally.
Instead, all Flower data is stored within your Jira or Confluence instance.
This means:
- Your data resides in the same Atlassian Data Residency location as your Jira or Confluence instance.
- When migrating your Jira/Confluence instance to another data residency region, all Flower data automatically follows.
- Flower does not transfer or store any customer data outside of Jira or Confluence.
For more details on Atlassian Data Residency, see the Atlassian Documentation .
Hosting and Logs
Flower runs as a cloud-based Atlassian Connect app.
The application itself is hosted on Heroku, and logs are processed via Heroku and Papertrail under their standard settings.
We do not modify how logs are stored.
Logs may contain technical error details but do not include customer data.
For more details on logging and security:
GDPR & Data Privacy Compliance
As a European company, Flower complies with the General Data Protection Regulation (GDPR).
This means:
- No external data storage: All data remains in your Atlassian instance.
- No tracking of user activity beyond what Jira and Confluence log natively.
- No access to customer data except when explicitly granted for support purposes.
- Right to be forgotten: If a customer deletes their Jira instance, all associated Flower data is also deleted.
To learn more about GDPR compliance in Atlassian Cloud, see:
Atlassian GDPR Information 
Data Retention & Account Deletion
Since all Flower data is stored in Jira/Confluence, data retention follows Atlassian’s lifecycle.
However, customers can take the following actions:
- End Subscription → Jira/Confluence retains the data as long as the instance exists.
- Delete Jira/Confluence Instance → All Flower-related data is removed.
- Request Manual Data Removal → Contact our support (Flower Communication Hub ).
Contact & Support
For any data privacy or security questions, please contact Flower BPM at:
Flower Communication Hub 
Version: Data Security & Privacy Statement v.1.1
Last Updated: 2/13/2025