EULA and Data Center for free apps


#1

I’m developing several plugins for Bitbucket Server. I do it for free and they are all open sourced. The most popular one with 2.3k installs. https://marketplace.atlassian.com/vendors/1211896/tomas-bjerre

Two things have come up lately (Data Center compatibility and EULA) that is making me consider stop publishing my plugins in Marketplace. It seems to me that free plugins are not very welcome. I don’t know if that is the intention of Atlassian.

My question is really, did I interpret this information wrong?

1. Data Center compatibility

https://developer.atlassian.com/platform/marketplace/developing-apps-for-atlassian-data-center-products/

I’m getting bombarded with request to update my plugins to support Data Center. To become listed as compatible I would need extensive testing, writing a report about that… not something I will spend time on when doing free development.

2. End User License agreement

I got an email stating I need to provide a link to my “End User License agreement” in order to keep my plugins listed in Marketplace efter 31 March. I do not have such an agreement and I do not have any plans writing one. I do this for free, it is provided as is just like most other free software. This is also something I will not spend time on when doing things for free.


#2

The requests for data center compatibility are sent by users, although, there is a button offered to users in the manage add-ons screen. I would suggest to automate sending the user back a default response that you don’t intend to create a data center version at this point and archive the email without having to see it.

Enter the text of the open source license as the EULA. The license defines the license rights of a user building the app and using it, and that’s a super-set of using it.

There’s always a quick and easy way to do these things, easier to just do them :).

The EULA aside, stability on data center is a critical item, especially considering how much users pay for it, I think users fed back that they expect Atlassian to perform some kind of auditing of plugins.


#3

Hi @tomas.bjerre85,

Thanks for publishing your app for free. We thank you for sharing your work with others. Let me help with understanding the issues you’ve raised:

1. Data Center compatibility

Yes, you are correct in assessing that to be DC Compatible it is now more intensive than just checking a box indicating your app is compatible with DC. Why did we do this?

A checkbox on your listing used to be the way to indicate compatibility with DC and apps that did this were evaluated and quickly uninstalled from DC. We dug in to find out why and it turned out that apps in DC didn’t work well in a clustered environment that DC operates in. Ultimately these apps performed poorly and made for a bad DC experience for customers.

In November 2017 we worked with Vendors/developers at App Week in Amsterdam to come up with a framework and testing tool that would help certify apps for DC. That work has been going on since then and apps are now flowing into the Marketplace with actual certification to customers that it will work on Data Center without performance degradation.

So yes you’ll need to do testing, create a report, and there will be more testing during the approval process from Atlassian. This is to ensure DC apps work performantly in the clustered environment.

Some options for you:

  • Charge for your app in DC. Since it’ll take some amount of work to get Certified as DC Compatible it might be palatable for you to charge for that effort in DC. Just keep this talk in mind if you do that.
  • Do nothing. While we would love for your app to support DC (as does the user base of your app) there is no requirement to be compatible.

2. End User License agreement

Yes, we need EULAs or Terms of Service from all third-party vendors. Due to the recent GDPR laws in Europe, Atlassian can’t legally cover under our EULA what apps do with customer data as each app can be different and as such we need Apps to declare that specifically out for customers. See this post which talks about the updated Marketplace agreement update, specifically:

Marketplace Agreement update

The terms of the Atlassian Marketplace Vendor Agreement will be updated soon and we are targeting them to take effect at the **end of March 2019 **. Some of the changes we are making to the Atlassian Marketplace Vendor Agreement include:

  • Requiring all vendors to provide a legally sufficient set of (a) user terms and (b) privacy policy to users, and removing the “Standard EULA Terms”. This change reflects the multiple deployment options for apps (server and cloud) and gives vendors the flexibility to set their own terms with users.
  • Adding a minimum-security standard and setting forth procedures for reporting incidents
  • Clarifying our policy on privacy and data usage by vendors.
  • Clarifying that vendors cannot review their own apps or apps made by competitors.
  • Adding the ability for vendor Apps to be listed in currencies other than USD for certain countries (such as Euros and Yen)
  • Explaining in more detail how our App Programs work
  • Updating our terminology (replacing “Add-on” with “App”, “Publisher” with “Vendor”, etc.)

Please review or add a URL linking your EULA (for server apps) or Terms of Use (for cloud apps) , as appropriate, in the “End user license agreement” field (which we will be renamed to “End User Terms of Use”), located in the latest version of your app in the Manage App Version screen in Atlassian Marketplace. This link will be shown to customers in the app installation consent flow. Apps that do not have customer terms in place by 1 April 2019 will also be scheduled for de-listing.

Additionally, you might find this Data privacy guidelines for developer helpful.

Cheers,
Ralph


#4

Ok that sounds like I cannot just resolve this by specifying link to Apache 2 license (https://github.com/tomasbjerre/pull-request-notifier-for-bitbucket/blob/master/LICENSE) in the EULA field?


#5

I edited the latest versions of the plugins to have EULA link to: http://www.apache.org/licenses/LICENSE-2.0.html

If that is not acceptable, you need to inform me about that and I will remove the plugins from Marketplace.