What Biller Plus stores
Biller Plus is built on Atlassian Forge. All app data is stored in your Atlassian site’s Forge storage (Forge SQL) and stays in the same region as your Jira data (data residency).
| Data | Purpose |
|---|---|
| Jira worklogs (id, issue, author account id, start, duration, description) | Calculate cost and billable value |
| Jira issue facts (id, key, summary, project, parent/Epic, remaining estimate, status category, story points) | Scope, % complete, reports |
| Rates, roles, budgets, expenses, clients, teams, schedules, holidays, exchange rates | Financial configuration entered by your admins |
| Atlassian account ids | Who logged time, who manages what, audit log |
| Alert email address (only for people who turn on “Email me alerts”) | Sending email copies of alerts |
| Invoice details (company name, address, email, tax ID, payment terms, notes, logo) and client billing addresses | Printing PDF invoices |
| Billed invoice records (lines, totals, reference, and when they were put in an accounting file) | Not billing anything twice |
| Slack / Teams webhook URLs (Forge secret storage) | Posting alerts to the channels an admin chose |
| Audit log | Who changed financial settings, when, and the old/new values |
| In-app notifications | Budget and margin alerts, timesheet approvals |
Display names are fetched from Jira when shown and are not stored. Email addresses from Jira are looked up during a CSV rate import (to match rows to Atlassian accounts) and to suggest an alert address; they are not stored. The only stored email address is the one a person enters for their own email alerts.
Email alerts
Email alerts are off unless a person turns them on (Notifications → Email me alerts). Before any alert goes to an address, Biller Plus emails a 6-digit code to it (through Broadcast, as below), and the person must enter that code in Biller Plus. A new or changed address needs a new code. Biller Plus keeps only a hash of the code. For those people only, when a budget, expected-cost or margin alert fires, Biller Plus sends Furvur’s email server (Broadcast, at broadcast.furvur.com) the email address, the project name and the alert text (for example the budget, the amount spent, the expected cost and the margin), plus the work of the last 7 days (issue and Epic keys and titles, hours, and their cost where the person may see it), the project’s billing totals (earned, invoiced, not invoiced yet, last invoice) and the areas of concern. Broadcast sends the email through Amazon SES (us-west-2, USA) and keeps a copy for delivery records. The rates of individual people are never included: cost is left out wherever it could reveal one person’s rate to someone who may not see rates. Turning email alerts off stops the emails at once.
Xero and QuickBooks Online files
Biller Plus does not connect to Xero or QuickBooks. A finance admin can download an invoice as a CSV file and import it in their accounting system themselves. The file is made in your Jira site and goes only to the person who downloads it.
Slack and Microsoft Teams (optional)
Nothing is posted unless a finance admin adds a channel webhook (Settings → Slack & Teams). Then, when a budget, expected-cost or margin alert fires, Biller Plus posts the project name, the alert text, the areas of concern and the hours of the last 7 days (with the name of the Epic that took the most time) to that channel: one message per project each day, or one per alert, as the admin chooses. Billing totals (earned, invoiced, not invoiced yet, last invoice) are posted only if the admin turns them on for that channel. A channel never gets the cost of single issues or Epics, or the rates of individual people. The webhook URL is kept in Forge secret storage and is never shown again in full.
Subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| Atlassian | Hosting (Forge functions and Forge SQL) | Your Jira data region |
| Amazon Web Services (SES) | Email delivery, for people who turn on email alerts | USA (us-west-2) |
Chosen by you, only when an admin turns them on (they act for you, not for Furvur): Slack, Microsoft (Teams / Power Automate).
What Biller Plus does not do
- No other data leaves Atlassian: the only external calls are email alerts and the optional Slack and Teams alerts above. Biller Plus uses no third-party analytics, tracking or advertising.
- Furvur staff cannot access the data in your Jira site. Furvur can see the alert emails that Broadcast sent.
Retention and deletion
Data stays while Biller Plus is installed. When you uninstall, Atlassian’s Forge data lifecycle applies: data is retained for the platform retention period and then deleted. Admins can export reports and worklogs as CSV at any time.
Contact
Questions or requests: support@transactful.com