Privacy policy
Last updated: 26 October 2026
In short. Helioviz runs in your browser. There is no account and no cookie, and the audience measure is anonymous. Your Jira token goes to Jira only. We store none of your data on our servers.
Who publishes Helioviz
Helioviz is published by Trait & Point. Contact: contact@helioviz.dev.
What Helioviz handles, and where
- Your Jira credentials (site address, Atlassian e-mail, API token): kept in your browser, on the device by default, or for the session only if you choose so (a shared computer). They only authenticate the requests your browser sends to Jira (
api.atlassian.com). - Your configuration (site, teams, projects, PIs, sprints, statuses, objectives) and your display preferences: kept in your browser's local storage.
- The data read from Jira (issue titles and statuses, assignees' names, sprints, links, status histories): shown in your browser. The last result is kept where the token is (session or device), to show at once on your next visit.
Helioviz only reads Jira: it never writes to it.
What goes through our servers
There is a single server function. When you type your Jira site's address, it receives the site's name, asks Atlassian for its technical identifier (cloudId) and sends it back. It receives neither your e-mail nor your token, and Helioviz records nothing. The answer, which pairs a site name with its identifier, may be cached by the host.
The site is hosted by Vercel Inc. (United States). Like any host, Vercel may log technical data about requests (IP address, page requested, date), under its own privacy policy.
What we do not do
- No account, no cookie, no advertising.
- No data sold or passed to third parties.
- Nothing loaded from another site: scripts, styles and fonts come from Helioviz.
Audience measure
Helioviz counts its visits with Vercel Web Analytics, cookie-free and anonymously. Its script and its reports go through Helioviz's own site. Only the page visited is sent (for instance / or /exemple), never the rest of the address: neither your configuration nor the team or objective opened. Vercel's rules apply to these measures.
Sharing a configuration
The share link and the export file hold your configuration (team names, project keys, PIs, statuses…), never your token. You choose whom to send them to.
In Microsoft Teams
When Helioviz is added to a Teams channel, the tab's address, which Microsoft stores and the channel's members can see, may hold the configuration (never the token). The Teams library downloads Teams' list of domains from Microsoft. These fall under Microsoft's privacy policy and your organisation's rules.
Atlassian and your organisation
The data read from Jira remains subject to Atlassian's terms and privacy policy, and to your organisation's rules on the use of its data.
Erasing your data
- In Helioviz: Settings › Display & sharing › Erase everything removes the configuration, the token and the cache from this browser.
- In your browser: clear the site's data.
- At Atlassian: revoke the token from your account (Security › API tokens) once you no longer need it.
Your rights
Helioviz keeps no personal data about you on its servers. For any question, or to exercise your rights over data the host may hold, write to contact@helioviz.dev. You may also contact your country's data protection authority.
Changes
This policy may change with Helioviz. The date at the top shows its last update.