Who we are
Bastion Helix is independent software, built and run by an independent developer in Bengaluru, India. It makes four products: Bastion Helix for Jira, an app for Jira Cloud; Bastion Helix Tables and Bastion Helix Capture, extensions for Google Chrome; and Bastion Helix Agent Lens, an API for AI agents. Contact: support@bastionhelix.com. This policy was last updated on 14 October 2026.
This page covers the Jira app and this website. The other products have their own policies: the Tables privacy policy, the Capture privacy policy and the Agent Lens privacy policy.
The Jira app
Bastion Helix runs on Atlassian Forge. Its code runs on Atlassian's infrastructure and everything it stores — its copy of your issues and worklogs, reports, rates, budgets, diagrams, automation rules, mail logs and AI usage — is kept in Forge storage inside Atlassian. There is no Bastion Helix server, and the app sends nothing to one or to any other third party. We cannot read your Jira data.
- What comes in from outside Atlassian: only what your own tools send to the app's addresses — email your mail routing forwards to an email channel, and AI usage, commits and pull requests your Claude Code, GitHub and scripts send to Workforce Intelligence. You choose whether to set any of these up.
- Where it lives: in your Atlassian site's Forge storage, under Atlassian's privacy policy and data residency.
- Who sees it: people in your Jira site, according to the rules in the documentation.
- Closed Atlassian accounts: as Atlassian requires, the app tells Atlassian every week which accounts it holds data about. When an account is closed, its ID and name are erased from the app's storage; that person's hours stay, under an anonymous stand-in, so totals still add up. When a profile changes, the name is read again from Jira.
- Deletion: uninstalling the app deletes its storage under Atlassian's retention policy for uninstalled apps.
For customers who need it, our Data Processing Addendum sets out how the app processes personal data on your behalf. Atlassian handles billing. As with every Marketplace partner, Atlassian shares licensing information with us: which sites have the app, their licence, and the technical and billing contacts on it. We use it only to support and license the app. If you contact support, we receive what you send us, and use it only to help you.
The Chrome extension
Bastion Helix Tables reads a web page only when you ask it to and works on its tables inside your browser. It has no account, no analytics and no tracking, and sends nothing to us unless you switch on its optional online AI connection, which passes tables through our relay without storing them. The details are in the Bastion Helix Tables privacy policy.
This website
- Waitlist: if you enter your email address, it is stored with Resend, the email service we use, so we can send one email when early access to the Jira app opens. It isn't shared with anyone else or used for anything else.
- No cookies, no analytics, no tracking.
- Hosting: the site is served by Cloudflare, which processes requests (including your IP address) to deliver pages and protect the site.
- Fonts and libraries: pages load fonts from Google Fonts and the live demos load open-source libraries from jsDelivr, so those services see your IP address when you visit.
Your choices
To see, correct or delete your waitlist email, write to support@bastionhelix.com and we will do it. For data in your Jira site, contact your site administrator; the app keeps nothing outside it.
Changes
If this policy changes, the new version will be posted here with its date.