CelesteCS JQL Extensions for Jira Cloud (Cloud app) is an app for the Cloud version of Atlassian Jira that adds a set of additional JQL functions, for example to search by comments, worklogs, sub-tasks, the number of issue links, or by date ranges such as quarters and half-years. CelesteCS JQL Extensions for Jira Data Center (Data Center app) is an app for Atlassian Jira Data Center that provides the same functions, plus functions that return related issues, such as linked issues, child issues, blockers, clones, duplicates and epics.

Where the Cloud app runs

The Cloud app is built on Atlassian Forge and runs entirely on Atlassian's own cloud infrastructure. It does not use Celeste Creative Solutions servers or any other third-party servers, and it does not make any network connections outside of Atlassian.

Atlassian publishes information about the security of the Forge platform on the Atlassian Trust Center.

Which data is processed by the Cloud app

To evaluate a JQL function, the app reads the data it needs from your Jira site through the Jira REST API, for example issue fields, comments, worklogs and sub-tasks of the issues matched by the JQL query you pass to the function. Of an issue's links, only their number is used; the linked issues themselves are not read. The app requests read-only access only (the read:jira-work and read:jira-user scopes), so it cannot create, change or delete anything in your Jira site.

The data is processed in memory while the function runs, and the result returned to Jira is a list of matching issues. Every function of the Cloud app returns only issues from the result of the JQL query you pass to it, never other issues. Comments and worklogs with restricted visibility (limited to a group or a project role) are ignored. Jira applies the permissions of the user who runs the search to the final search results. Neither employees of Celeste Creative Solutions nor any other third party is able to access the content of your Jira issues.

Which data is stored by the Cloud app

The app has no database of its own and does not use app storage.

Some functions use Jira's built-in precomputation mechanism for JQL functions: the computed result is stored by Jira itself, inside your Jira site, and is refreshed when comments or issue links change. For this, the app receives Jira events about added or deleted comments and issue links.

The app may write logging information to the Forge platform. These log entries contain only technical diagnostic information, such as the name of a function, the number of refreshed results or an error message, and are kept by Atlassian according to the Forge logging policy. The app is designed not to write the content of your issues to the logs.

Where the Data Center app runs

The Data Center app runs on your Jira Data Center servers. It does not make any outbound network connections, so no data is accessed or somehow transferred to Celeste Creative Solutions servers or other third-party servers.

Which data is processed by the Data Center app

The Data Center app reads the issue data needed to evaluate a JQL function through the Jira API and processes it locally on the Jira server. Part of this data may be written to the Jira logs, but these logs are stored locally on the Jira server. Neither employees of Celeste Creative Solutions nor any other third party is able to access this data without the help of your Jira administrator.

Responsibility for your data

As between Celeste Creative Solutions and Atlassian, Celeste Creative Solutions, and not Atlassian, is responsible for the privacy, security and integrity of the data processed by the app, as required by Section 9.5 of the Atlassian Developer Terms.

Security of your data is a shared responsibility. Atlassian operates the Forge platform and the Jira Cloud infrastructure on which the Cloud app runs. Your site administrators decide who can use Jira and the app and which data each user is allowed to see; Jira applies these permissions to the search results returned to each user. Celeste Creative Solutions is responsible for the app itself.

This statement describes our practices for information purposes. It does not create any warranty, obligation or liability in addition to those set out in the End User License Agreement, which alone governs our warranties and liability.

Security incidents

We investigate security events that come to our attention and may affect the app. If we confirm a security incident that affects customer data, we notify Atlassian through its ECOHELP service desk in accordance with Atlassian's requirements for Marketplace partners, and we inform the affected customers as soon as reasonably practicable.

Reporting a vulnerability

If you believe you have found a security vulnerability in a CelesteCS app, please email This email address is being protected from spambots. You need JavaScript enabled to view it. with "Security" in the subject. Describe the affected app and version, the steps to reproduce the issue and its possible impact. Please do not disclose the vulnerability publicly until it is fixed. We acknowledge reports, keep reporters informed about the progress and aim to fix confirmed vulnerabilities within the timeframes of Atlassian's Security Bug Fix Policy. The Cloud app follows Atlassian's Security requirements for cloud apps.

Contact

For privacy inquiries and security reports, contact us at This email address is being protected from spambots. You need JavaScript enabled to view it..

Changes to this statement

When we make material changes to this statement, we publish the updated version on this page with a new effective date, mention the change in the release notes of the next app version on the Atlassian Marketplace, and inform Atlassian by updating the app's Privacy and Security information on the Marketplace.

 

Effective as of November 05, 2026.