Asset Sync privacy notice

This notice applies to Asset Sync, a Google Workspace Marketplace add-on for Google Sheets provided by Let’s Talk Solutions Ltd, trading as LT.Solutions. It explains what Asset Sync accesses, what our service stores, and how you can request deletion.

1. What Asset Sync does

Asset Sync runs inside Google Sheets and imports Jira Service Management Assets data into a spreadsheet you choose. Version 1 is a one-way import: it reads from Assets and writes to your spreadsheet. It does not write back to Jira or Assets, and it refreshes only when you ask it to.

Asset Sync uses a backend service operated by LT.Solutions and hosted on Google Cloud in the United Kingdom, in the London region. The service handles only the data described in this notice.

2. Google user data

When you connect your Google account, Asset Sync requests access needed to provide the service:

• Identity information. Your Google account ID and email address are used to associate your authorised connection and saved imports with you. We do not use them for another purpose.
• Spreadsheet access. Asset Sync creates tabs and writes rows in the spreadsheet you choose as an import destination. It accesses a spreadsheet only to the extent required to create, write, or refresh an import you have configured. It does not access spreadsheets you have not selected for use with the service.

Asset Sync's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it, or allow humans to read it except with your permission when required to provide support, where necessary for security purposes, or where required by law.

3. Atlassian data

When you connect your Atlassian account, Asset Sync reads Jira Service Management Assets data that your account is permitted to see. Depending on the import you configure, this may include schemas, object types, attribute definitions, objects and attributes, and results selected by your filters or queries.

Assets object data passes through our service transiently while an import is running and is written into the Google spreadsheet you selected. We do not retain imported Assets object data on our servers after the import completes.

4. What we store

To maintain authorised connections and saved imports, our service stores limited configuration data in a restricted Google Cloud Firestore database:

• OAuth refresh tokens for your authorised Google and Atlassian connections.
• Saved import definitions, including the schema, object types, columns, filters, destination spreadsheet, and refresh configuration you selected.

OAuth tokens are never written to application logs. A stored token is used only when you ask Asset Sync to perform or refresh an import. Version 1 does not refresh in the background.

5. Deletion and retention

Disconnecting an account through Asset Sync deletes the stored OAuth refresh tokens associated with that connection. Deleting a saved import deletes its stored definition.

We retain authorised connection information and saved import definitions only for as long as they are required to provide the service. You can email privacy@lt.solutions to request removal of the records associated with your account.

Data already written into your Google spreadsheet remains in that spreadsheet and is not removed when you disconnect Asset Sync or delete an import. Assets object data passing through the service during an import is not retained after the import completes.

6. Sharing and security

We do not share Asset Sync data with third parties for their own purposes. The service communicates with Google APIs and Atlassian APIs as required to provide the service. Imported customer data is not sent to advertising, analytics, artificial intelligence, or large language model services.

We restrict access to the service and its database and do not log OAuth tokens. No security measure can eliminate every risk, but we maintain safeguards appropriate to the limited data the service stores.

7. Your rights and contact

Let’s Talk Solutions Ltd is the controller for personal data described in this notice. Depending on the circumstances and applicable UK data protection law, you may ask for access, correction, deletion, restriction, objection, portability, or withdrawal of consent.

For privacy questions or deletion requests, email privacy@lt.solutions. We will respond within the period required by applicable law. You may also complain to the Information Commissioner's Office if you believe your personal data has been handled unlawfully.