App privacy policy

Apps covered by this policy

• Codegeist access checkpoint, including the Lab interface review panel and Lab interface review settings.

Silhouette LLC is the app operator. Atlassian provides the Forge and Jira platforms used for processing and storage. This notice applies only to the app listed above, not to all Silhouette products or the general Silhouette website.

What you provide

The competition workflow uses fictional synthetic contract definitions. Do not enter patient data, customer information, or credentials. The app cannot reliably detect all sensitive data and does not certify that inputs are safe. Separate engineering review is limited to authorized non-patient specifications under its explicit workflow restrictions; it does not expand the synthetic competition workflow.

Processing, storage and purpose

The app uses Atlassian Forge processing and app storage, and Jira APIs. Its declared permissions are read:jira-work, write:jira-work and storage:app. These support checking the configured Jira context, comparing inputs, retaining review evidence and workflow state, and creating explicitly approved Jira subtasks.

Storage location depends on the installation's Atlassian hosting and data-residency settings. Atlassian documents how Forge-hosted storage follows those settings; Forge processing may sometimes run in another location.

Stored records include account, site, project and issue identifiers; configuration and workflow versions; actor identifiers and timestamps; preview evidence and text excerpts; task drafts; hashes; and duplicate-prevention receipts. Account identifiers remain personal data even when the examples are fictional.

Full Before and After documents are processed for the request, not saved as full analysis snapshots. Text excerpts and hashes can remain in preview records and approved Jira tasks.

Limited technical diagnostics record an independent diagnostic ID, processing stage or operation, duration, failure category and typed HTTP status. These app diagnostic events omit request bodies, user identities, preview tokens and raw errors; this is not a claim about all platform logs.

When you explicitly approve task creation, the task content is saved in Jira and can be accessed under that site's permissions. Forge app records and Jira task records have separate lifecycles.

Retention and deletion limits

Preview approval expires after 10 minutes. Expiry, Cancel and workflow deactivation do not erase stored records. This build has no automatic cleanup or in-app erasure flow; duplicate-prevention receipts remain.

Do not uninstall or clear storage to retry task creation. Jira tasks and external copies are not erased by cancelling an app preview.

Optional manual AI sharing

No AI provider is connected to this app. If you copy a packet to your chosen provider, that is your separate disclosure under the provider's terms. Review the goal and content before sharing. The app cannot delete copies held by that provider or its connectors.

Questions and requests

For support or privacy questions, or to make a request about data held by this app, use Silhouette's contact form. Identify the app and describe your request. Do not include patient data, credentials or other sensitive content.