Terms of Use

Effective date: 14 November 2026 | Revised: 14 November 2026

1. Parties and acceptance#

These Terms are between Shai Shmuel Laish, an individual operating Config Health Guardian for Jira at אהבת אדם 77, דירה 2, כפר יונה, 4034388 (Provider, we, us), and the business or professional customer identified in the applicable Atlassian Marketplace order (Customer, you). Config Health Guardian for Jira (App) is offered for business and professional use, including sole proprietors, and not for personal, family or household use. A trading name does not replace the legal identity of either party.

Anyone accepting on behalf of an organization represents that they have authority to bind it. Authorized Users are persons the Customer permits to administer the App within its licensed environment; the Customer is responsible for their use. Technical installation permission alone does not establish contractual authority. The Customer must arrange acceptance by an authorized person. These Terms must be made available before acceptance through Marketplace or another documented acceptance process.

2. License, service and limitations#

During the subscription or permitted trial, we grant a limited, non-exclusive right to use the App and documentation for internal business purposes within the installation, user tier and other scope of the Marketplace order. An affiliate or service provider acting on the Customer's behalf must remain within that scope and the Customer's responsibility. Resale or sublicensing requires written permission and any necessary Atlassian authorization.

The App provides read-only Jira configuration checks, findings, coverage, comparisons and review guidance. It writes its own records but does not modify Jira configuration. Supported domains and limits are described in the User Guide and Security and Data. Configuration complexity, visible assets, permissions, API limits and platform availability can affect completion. A purchased user tier does not promise unlimited configuration capacity.

Findings are administrative decision-support outputs, not a security certification, legal compliance assessment, employment-status determination or assurance that an asset is safe to remove. Absence of findings does not establish a secure, complete or suitable configuration. Partial coverage is not a clean bill of health. The App is not a Jira backup, disaster recovery or automatic repair service.

3. Customer responsibilities#

The Customer must review findings against its business context, dependencies and change-control process; maintain appropriate backups and administration arrangements; and obtain authority, lawful bases and notices for its instructions. Account activity and ownership signals must not be the sole basis for personnel or access-removal decisions.

Do not bypass licensing or access controls, access another customer's information, introduce malicious code, materially disrupt the service or use it unlawfully. Reverse-engineering restrictions apply only where permitted by law. Good-faith vulnerability reporting to our security contact is permitted; it does not authorize accessing other customers' information or disruptive testing.

4. Marketplace, fees and cancellation#

Atlassian administers Marketplace subscriptions, trials, pricing, taxes, billing and license status under the applicable Marketplace Terms. Use the relevant Atlassian controls to cancel or prevent renewal. Uninstalling, deleting App history and cancelling billing are distinct actions.

Refund eligibility and handling follow the applicable Marketplace policy and mandatory law. Its current 30-day provision is subject to qualifying-order conditions and does not create a refund right for every renewal or upgrade. We offer no alternative payment arrangement unless applicable Atlassian rules and a valid written agreement both permit it.

An expired license restricts paid functionality. Subject to platform access and security requirements, available reads, export and privacy controls are not conditioned on renewing a license.

5. Support and availability#

The Support Policy describes asynchronous English support and first-response targets, not resolution guarantees. No separate uptime SLA, fixed live-support window or 24/7 customer-support service is included. This does not limit mandatory incident duties or our applicable obligations to Atlassian.

Jira, Forge and Marketplace are separate Atlassian services. Their availability, quotas and changes can affect the App. We will take reasonable steps within our control to maintain the App, address material defects and communicate material service changes. Atlassian is not a party to these Terms.

6. Information, confidentiality and intellectual property#

The Customer retains rights in its data and authorizes processing only as needed to provide, secure and support the service, follow documented instructions and meet legal obligations. No right is granted to use Customer data for advertising, sale, AI training or unrelated product development. We and our licensors retain rights in the technology and documentation. This does not prevent the Customer from using its own exported records and findings.

Each party must protect the other's confidential information with at least reasonable care, use it only for the Agreement, and limit disclosure to personnel, providers and advisers who need it and have appropriate confidentiality duties. Exclusions apply to information demonstrably public without breach, already lawfully known, independently developed or lawfully received without restriction. Compelled disclosure is permitted to the extent required, with notice and reasonable protective assistance where lawful. These duties survive for three years after termination, and for trade secrets while legally protected. Personal-data duties apply independently of this period.

The Privacy Policy describes processing and individual rights. The DPA forms part of the Agreement for personal data processed on the Customer's behalf. Where the Customer is itself a processor, its instructions must be authorized by the relevant controller.

7. Export, deletion and end of service#

An authorized administrator can download supported customer-data records as JSON. The file can include decoded original account IDs and evidence and must be handled securely. Installation-specific storage masking does not make the export anonymous; the installation key and internal identity mapping/index records are not export content. It is not a Jira backup, import/restore promise or atomic snapshot. Export is paginated, reflects a reading interval and has documented browser resource limits. Contact [email protected] for assisted access, return or deletion; missing self-service functionality does not remove a legal right.

Delete Guardian history removes records described in the Privacy Policy through background processing. It does not alter Jira source data, cancel billing or disable future scans. Export first if a copy is needed, disable future collection if intended, and use deletion before uninstall where practicable. Contact us if this fails or is impossible. Minimal privacy-restriction markers may remain to prevent prohibited re-collection while the App remains installed. In the masking-enabled build, the installation key and necessary identity control also remain; unused account mappings are removed by bounded cleanup after remaining references and pending work are checked, subject to the DPA and applicable return/deletion obligations.

Return and deletion on termination follow the DPA and mandatory law. Uninstalling first is not a waiver. On discontinuing the App, we will provide reasonable advance notice where practicable and any return/transition assistance required by the Agreement and applicable law. Billing adjustments remain subject to Marketplace administration and mandatory rights.

8. Suspension and termination#

We may restrict use as reasonably necessary for an urgent security risk, unlawful use, license expiry or material breach. Where practicable and appropriate to the risk, we will give notice and an opportunity to remedy. Restrictions will be limited in scope and duration, with access restored when the basis is resolved. Suspension does not authorize withholding legally required return/access assistance.

A party may terminate for a material breach uncured 30 days after written notice, or sooner where law permits termination for a breach incapable of cure. Marketplace cancellation/expiry processes still apply. Accrued payment obligations, confidentiality, IP, liability, dispute provisions and continuing data duties survive as their nature requires.

9. Limited warranty and remedies#

We will provide the service with reasonable skill and care and materially in accordance with current published documentation. On prompt notice of a reproducible material nonconformity, we will use reasonable efforts to correct it or provide a reasonable workaround. If we cannot within a reasonable period, the Customer may terminate the affected service and seek an appropriate refund for its unused affected prepaid period through Marketplace, without limiting mandatory remedies.

Except for express commitments and rights that cannot lawfully be excluded, we do not warrant uninterrupted/error-free operation, complete detection, fitness for a specific purpose, or third-party data accuracy/availability. Mandatory warranties and remedies remain unaffected. A trial is for evaluation and does not create an unlimited operational warranty.

10. Liability#

Subject to the exceptions below, each party's aggregate liability arising from the Agreement, under any legal theory, is limited to the fees actually paid for the App under the affected Customer subscription in the three months before the event giving rise to the claim. If no such fees were paid, the aggregate cap is USD 25. If applicable law does not permit liability to be limited to that amount, liability is limited to the lowest amount permitted by that law. Fees administered through Atlassian count. Multiple claims do not multiply this cap.

To the extent permitted by law, neither party is liable for indirect or consequential loss, lost profits or lost business opportunity. Labelling a claim as data, confidentiality or security related does not decide whether the loss is direct or indirect.

Limits do not apply to fraud or wilful misconduct, liability that cannot lawfully be limited, or the Customer's properly due subscription fees. They do not restrict data subjects' or regulators' mandatory rights or override mandatory transfer-instrument terms. These Terms grant no additional contractual indemnity; mandatory remedies remain.

11. Changes, notices and general terms#

Material changes will be notified reasonably in advance through an appropriate channel, are not retroactive, and require renewed acceptance or an opportunity to reject/end affected service where required. Urgent legal/security changes may take effect sooner with an explanation. The applicable version must remain identifiable.

Legal notices: [email protected] and the Provider's address, אהבת אדם 77, דירה 2, כפר יונה, 4034388. Support: [email protected]. Parties must keep notice details current. We may use the authorized administrative contact; publication alone is not assumed sufficient where individual notice is required.

Assignment must not materially reduce rights or data protections; a permitted successor must assume obligations and provide required notices/safeguards. Invalid provisions are severed only as necessary, leaving the remainder effective where possible. Failure to enforce is not a waiver.

The Agreement comprises these Terms, the applicable order and incorporated DPA and Support Policy. The Privacy Policy is a transparency notice, not a substitute for instructions. Mandatory law and applicable transfer instruments take precedence; the DPA prevails on Customer Personal Data. No order overrides mandatory Atlassian rules. A specifically negotiated amendment prevails only in its lawful, stated scope.

The Agreement is governed by the laws of the State of Israel. The competent courts in the Tel Aviv-Yafo district have exclusive jurisdiction over disputes relating to the Agreement or the App, subject to mandatory venue rules and laws that cannot be waived. These selections do not remove mandatory protections or override applicable transfer instruments. English is the governing contractual language to the extent permitted by law. The Agreement is the complete agreement on its subject matter without excluding fraud or mandatory rights.