Privacy policy

Effective September 13, 2026

This policy covers the Punchcard Timesheets app for Jira Cloud, published by Construct Labs. Short version: the app runs inside Atlassian, keeps very little, and sends nothing anywhere else.

What the app processes

To show and edit timesheets, the app reads your Jira worklogs, issues and user profile, using your own Jira permissions. This happens inside Atlassian's platform on each request. The app does not copy worklogs into its own storage.

What the app stores

• Timesheet status: for each person and week, whether it is open, submitted, approved or sent back, when, by whom, the total hours, and any approver comment.
• Site settings: week start, working days, target hours, approval rules and the list of approvers.
• Bug reports you choose to send: your name, the screen you were on, your last few actions in the app, the error message, your browser type and app version, and the text you typed. Worklog contents are never included.

All of this is held in Atlassian's app storage for your site, in your site's data residency region. It is removed when the app is uninstalled.

What the app does not do

• No analytics, usage tracking, cookies, or third-party scripts.
• No data sent to servers outside Atlassian. Construct Labs operates none for this app.
• No selling or sharing of data with anyone.

Logs

Atlassian keeps operational logs for the app, which contain request identifiers, function names, timings and error messages, and the site address and account identifier of the user for failed requests. Construct Labs reads these logs to fix problems. They do not contain worklog text.

Support email

If you email support, we keep the correspondence for as long as needed to resolve the request and for our records.

Your rights

Site admins control the app's data through Jira and by uninstalling the app. For any request about your data, email support@constructlabs.io.

Contact

Construct Labs, Wayne, New Jersey, USA. support@constructlabs.io.