Terms & EULA

1. Agreement

This End User Licence Agreement ("Agreement") is between Contextra Labs ("Vendor", "we", "us") and the entity or person installing Contextra Secure Field for Jira ("the App", "you", "Customer"). Installing or using the App means you accept this Agreement.

The App is distributed through the Atlassian Marketplace. The Atlassian Marketplace Terms of Use also apply to your purchase. Where this Agreement conflicts with the Atlassian Marketplace Terms of Use, the Atlassian terms prevail.

2. Licence grant

Subject to your compliance with this Agreement and payment of applicable fees, we grant you a non-exclusive, non-transferable, non-sublicensable licence to install and use the App on the Atlassian Cloud sites covered by your subscription, for the number of users covered by your subscription, for your internal business purposes.

3. What the App does with your content

This section matters more than the rest. Read it.

The App encrypts values you or your users save through its custom fields. Specifically:

• A saved value is encrypted (AES-256-GCM) inside the App's backend and stored in the App's own storage, never as the custom field's own Jira-visible data.
• Revealing or editing a value requires being on that field's own allow-list — a per-field list you configure, by user, group, project role, assignee, reporter, creator, project lead, or JSM request participant. By default this list is empty, meaning nobody — including a Jira site administrator — can reveal or edit a value until you add someone.
• You may optionally enable a second-factor confirmation before reveal, an auto-expiry after a configured number of hours, and a separate audit-log visibility allow-list independent of who can reveal the value.
• You may optionally enable "bring your own encryption key," supplying your own key instead of the App-managed default. If that key is lost, the encrypted value cannot be decrypted by anyone, including us — there is no recovery path. This is a deliberate design choice, disclosed here plainly, not a limitation we intend to fix.
• A separate migration wizard can copy values from an existing plain Jira field into the App's encrypted storage, issue by issue, without altering the original — and, only as an explicitly confirmed second step, clear the original field's value. That clearing step cannot be undone; there is no backup. It requires Jira administrator permission and an exact typed confirmation phrase.
• Field configuration — allow-lists, second-factor and auto-expiry settings, and whether BYOK is enabled — is stored in the App's own storage and is deleted on uninstall, along with every encrypted value and the audit log.

You should know that:

• you are solely responsible for the custody of any key you supply under bring-your-own-key, and for the consequences of losing it;
• the migration wizard's clear step is irreversible — you are responsible for verifying the copied values are correct before confirming it;
• an inactive licence blocks saving and revealing values but never decrypts, exposes, or deletes anything already stored;
• uninstalling the App deletes every encrypted value, every field's configuration, and the entire audit log — nothing about this App's stored content survives an uninstall, unlike an ordinary Jira field.

Full detail on data handling is in our Privacy Policy, which forms part of this Agreement. Our Security Policy describes the technical and organisational controls that protect it.

4. Subscription, trial and licence status

• The App is licensed on a subscription basis through Atlassian, which handles billing, renewals and cancellation as merchant of record.
• A free evaluation period is offered, as configured on the Atlassian Marketplace.
• If your licence lapses or becomes inactive, the App stops accepting new saves, reveals, configuration changes, and migration-wizard runs. Values already stored remain encrypted in place — an inactive licence never decrypts, exposes, or deletes your existing content.

5. Acceptable use

You may not:

• reverse engineer, decompile or disassemble the App, except where and to the extent that restriction is prohibited by applicable law;
• resell, rent, sublicense or provide the App as a service to third parties;
• remove or obscure any proprietary notice;
• attempt to circumvent the App's allow-list, second-factor, or administrator-only checks;
• use the App in violation of any applicable law, including the laws of the United Arab Emirates, or in violation of any third party's rights;
• circumvent the licensing or evaluation limits described in section 4.

6. Your data

You retain all rights in the values and content you encrypt through the App. We claim none.

Contextra Labs is a processor of content you control as controller. We do not access, inspect, or use encrypted values or audit-log content for any purpose other than operating the App's stated functionality. Full detail is in the Privacy Policy referenced above.

To the extent any personal data is processed, we do so in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where applicable to you, the EU General Data Protection Regulation.

7. Support

We provide support by email at support@contextra-labs.com, in English and Arabic, targeting a response within two business days. UAE public holidays and the weekend (Saturday and Sunday) are excluded. Support is provided for the current version of the App on supported Atlassian Cloud sites.

8. Warranty disclaimer

The App is provided "as is" and "as available". To the maximum extent permitted by applicable law, we disclaim all warranties, whether express, implied or statutory, including any implied warranties of merchantability, fitness for a particular purpose, title and non-infringement.

We do not warrant that the App will be uninterrupted or error-free, or that its second-factor delivery mechanism (see the documentation's limitations) will be available for every field configuration. We do not warrant against loss of access to a value encrypted under a customer-supplied ("bring your own") key that is subsequently lost — this is disclosed plainly on the option itself and in section 3, and there is no remedy other than the customer's own key custody. Similarly, we do not warrant against loss of an original field's data cleared via the migration wizard's confirmed, irreversible second step — verifying the copied values before confirming that step is the provided safeguard.

Nothing in this Agreement excludes or limits any liability that cannot lawfully be excluded or limited under the laws of the United Arab Emirates, including liability for fraud, for gross negligence, for wilful misconduct, or for death or personal injury caused by negligence. In particular, nothing in this Agreement is intended to operate as an exemption from liability for a harmful act contrary to Article 296 of the UAE Civil Transactions Law.

9. Limitation of liability

Subject always to section 8, and to the maximum extent permitted by applicable law:

• we are not liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of profits, revenue, data, business or goodwill, whether or not we were advised such loss was possible;
• this includes loss of access to a value following the loss of a customer-supplied encryption key, and loss of an original field's data following a confirmed migration-wizard clear step — the App discloses both behaviours plainly, and verifying/backing up before either action is the intended safeguard;
• our total aggregate liability arising out of or relating to this Agreement is limited to the total fees you actually paid for the App in the twelve (12) months immediately preceding the event giving rise to the claim.

You are responsible for your own key custody under bring-your-own-key, and for verifying migration results before confirming the migration wizard's clear step.

10. Fees and taxes

Fees are set on the Atlassian Marketplace and are collected by Atlassian as merchant of record. Amounts are stated exclusive of value added tax and any other applicable taxes or duties, which are handled by Atlassian in accordance with its own billing terms and, where applicable, UAE Federal Decree-Law No. 8 of 2017 on Value Added Tax.

11. Term and termination

This Agreement runs for as long as your subscription is active. Either party may terminate it by ending the subscription through the Atlassian Marketplace. On termination you must stop using the App and uninstall it.

Uninstalling the App permanently deletes every encrypted value, field configuration, and the entire audit log — see section 3.

We may suspend or terminate the licence if you materially breach this Agreement and do not remedy the breach within thirty (30) days of written notice.

Sections 6, 8, 9, 13, 15 and 16 survive termination.

12. Intellectual property

The App, including all software, documentation, trademarks and design, remains the exclusive property of Contextra Labs. This Agreement grants a licence to use the App and transfers no ownership. Section 6 governs ownership of content you encrypt through the App.

13. Force majeure

Neither party is liable for failure to perform any obligation, other than an obligation to pay, caused by an event beyond its reasonable control, including acts of God, war, civil unrest, government action, failure of a telecommunications or hosting provider, or failure or interruption of the Atlassian platform on which the App runs.

14. Governing law and jurisdiction

This Agreement is governed by, and construed in accordance with, the federal laws of the United Arab Emirates and the laws of the Emirate of Dubai, without regard to conflict-of-law rules.

The courts of the Emirate of Dubai have exclusive jurisdiction over any dispute arising out of or in connection with this Agreement, except that either party may apply to any court of competent jurisdiction for injunctive or other interim relief to protect its intellectual property or confidential information.

15. Entire agreement, assignment and notices

This Agreement, together with the Privacy Policy, is the entire agreement between the parties concerning the App and supersedes all prior discussions. If any provision is held unenforceable, the remainder continues in force.

You may not assign this Agreement without our prior written consent. We may assign it to a successor in connection with a merger, acquisition or sale of assets.

Notices to us must be sent to support@contextra-labs.com and to Contextra Labs, Dubai, United Arab Emirates.

16. Language

This Agreement is written in English. Should any dispute be brought before the courts of the Emirate of Dubai, proceedings will be conducted in Arabic and an Arabic translation of this Agreement will govern to the extent required by those courts. In the event of any inconsistency between the English text and a certified Arabic translation, the Arabic text prevails before those courts.

17. Changes to this Agreement

We may update this Agreement. Material changes will be published on this page with an updated date and noted in the App's release notes. Continuing to use the App after a change takes effect means you accept the updated Agreement.

18. Contact

Contextra Labs
support@contextra-labs.com

If your use of the app involves us processing personal data on your behalf, see also the Data Processing Agreement.