Privacy policy
Effective July 2, 2026
InvoiceBridge is operated by Worqflow. It turns Jira worklogs into unsent invoices in the QuickBooks Online company you connect. This page is the complete account of what the app touches.
StoredWhat the app keeps
Everything the app stores lives in Atlassian Forge hosted storage, inside Atlassian's infrastructure, scoped to your installation:
- Per-project billing configuration — the QuickBooks customer and service item you chose, hourly rates (including per-user overrides keyed by Atlassian account id), and currency.
- An invoiced-worklog ledger — for each invoiced worklog: its id, the QuickBooks invoice id, the billed amount, and an hours snapshot. Worklog text is not stored.
- Your QuickBooks Company ID and connection metadata.
- Short-lived records of in-flight invoice attempts, kept solely to prevent duplicate invoices.
What leaves Atlassian
When a user creates an invoice, worklog-derived line items — issue key, issue summary, the author's display name, hours, and computed amounts — travel to the QuickBooks Online company that user connected, via Intuit's API. That is the only destination. No analytics services, no email, no other parties.
AuthAuthentication
Each user connects to QuickBooks with their own Intuit login over OAuth 2.0, managed by Atlassian Forge's external authentication. The app's code never sees, stores, or transmits tokens.
RevokeRevoking access
Removing the app's access inside Atlassian does not remotely revoke the Intuit token; Intuit tokens expire on their own after roughly 100 days of inactivity. To revoke QuickBooks access immediately, use myapps.intuit.com.
RetentionRetention and deletion
App data follows Atlassian's Forge data lifecycle and is deleted when the app is uninstalled from your site. Per-project configuration can be changed at any time from within the app.
Contact