As a Jira Cloud add-on developer I'd like to know what is considered to be user personal data (GDPR)

[Serhii Syrotskyi]

Hi to all.

As an add-on developer I'd like to know whether the add-on should handle any personal data in unstructured format as the subject of GDPR regulations. 

For example:

* Our add-on has a text input field for a description of the add-on configuration.
A user puts, for example, the following text: "Configuration for XXX as suggested by John Doe. If necessary - contact him by john.doe@example.com".
* Add-on stores that information (description of the configuration) as an unstructured text.
* Add-on sends that information to another service which also stores it.

So our questions are:

* Should the add-on be responsible for recognizing that the inserted text contains personal data and report (via Personal Data Reporting API) about storing user personal data / remove that data on Atlassian's request?
* Should the add-on report about storing user data on the remote service and remove that data from the remote service on the Atlassian's request ?