Privacy Statement
Effective date: 10 September 2026
This Privacy Statement explains how MarkUp-N-Track (“we”) handles information when you use the MarkUp-N-Track web application at https://www.markupntrack.com.
1. Who we are
MarkUp-N-Track is a web application that marks up SharePoint PDFs in the browser and binds comments to Jira Cloud issues. This domain is the product, documentation, and Microsoft identity association host.
2. Information we collect on this website
- Server logs. Our host may record IP address, user agent, requested URL, and time. These logs are used for security and reliability.
- No separate marketing account. Documentation and the product share this site. You sign in only when you open drawings or connect Jira.
- Cookies. We use technical cookies required to sign in and serve the app. We do not set advertising cookies.
3. Information the web application processes
MarkUp-N-Track runs in your browser and talks to Microsoft and Atlassian on your behalf.
| Data | Where it lives | Purpose |
|---|---|---|
| Microsoft sign-in tokens | Microsoft identity session in the browser | Open and save the SharePoint file |
| Atlassian API token | Browser session only | Jira REST calls (including /myself during setup) |
| Jira site URL and email | Browser session | Connection wizard |
| Filename, project key, story key | Local session; Jira queries | Resolve Drawing Story / Task |
| PDF annotations | The SharePoint PDF | Standard comments visible in other viewers |
| SharePoint hyperlink | Drawing Task in Jira | Durable pointer to the file |
v1 does not send your Atlassian token to markupntrack.com. We do not use drawing contents for advertising or model training.
4. Microsoft and Atlassian
When you sign in, Microsoft and Atlassian process identity and content under their own privacy terms. MarkUp-N-Track requests only the permissions needed to open the launched file, write annotations, and create or update the Jira items you choose. The Entra application association is published at /.well-known/microsoft-identity-association.json with application ID 58415ece-f2e7-4088-a5c3-2a4ede34c97c.
5. Legal bases (EEA / UK)
Where GDPR applies, we process website logs on the basis of legitimate interests (security and delivery of the site). The web app processes workspace content on your instructions as you use Microsoft 365 and Jira. Your organization is typically the controller of drawing and issue data.
6. Retention
- Website logs: retained by the host for a short operational window, then deleted or aggregated.
- Jira connection details: until you sign out, clear the session, or disconnect.
- Jira and SharePoint records: retained by your organization under its own policies.
7. Sharing
We do not sell personal information. We share data only with infrastructure providers that host this website, with Microsoft and Atlassian as you direct the app, or if required by law.
8. Security
API tokens stay in the browser session rather than in the PDF or in source control. Sign out when you leave a shared computer, and revoke tokens when staff leave.
9. Children
MarkUp-N-Track is a workplace product. It is not directed at children under 16.
10. Your rights
Depending on your location you may have rights to access, correct, delete, or export personal data we hold about website visitors, or to object to certain processing. Drawing and Jira records should be requested from your organization. Contact privacy@markupntrack.com.
11. Changes
We will post updates at /Privacy with a new effective date.
12. Contact
privacy@markupntrack.com
See also the Terms of Service.