Privacy Policy
This policy describes what data the app Read & Acknowledge — Page Confirmations for Confluence ("the App") processes, where it is stored and what rights you have.
1. Runs on Atlassian
The App is built on the Atlassian Forge platform. It has no servers of its own and makes no network calls outside Atlassian. All processing and storage happen inside Atlassian's infrastructure (Forge hosted storage: Forge SQL and key-value storage) within your Atlassian site's data residency region. The vendor has no access to your site's data.
2. Data the App stores
- Confluence page IDs, page version numbers, page titles and SHA-256 hashes of page content (used to detect changes between versions).
- Atlassian account IDs of people who confirmed a page, with the timestamp and page version of each confirmation.
- Acknowledgement settings per page (due period or date, required group IDs, reminder flag) and site-wide defaults.
- A cache of group membership (account IDs and display names) kept for up to one hour to build reports.
The App does not store page bodies, e-mail addresses, IP addresses, device information or any data from outside Confluence. Display names shown in reports are fetched from Confluence at render time and are not stored beyond the one-hour cache.
3. Purpose
Data is processed solely to provide the App's function: recording that a person confirmed reading a specific version of a page, reporting coverage to page owners and administrators, posting reminder comments, and exporting evidence for audits. The customer acts as data controller; the vendor acts as processor through Atlassian's platform.
4. Access control
- Readers see only their own status.
- Page reports are visible to anyone who can view the page.
- Acknowledgement settings can be changed only by people who can edit the page.
- The full audit log and site-wide defaults are restricted to Confluence administrators.
5. Retention and deletion
- Settings and version snapshots are removed when a page is deleted.
- The confirmation log is append-only (tamper-evident) and is retained for the lifetime of the installation, because it serves as audit evidence.
- Uninstalling the App removes all App data from the site in accordance with the Forge platform's storage lifecycle.
- Requests to erase a specific person's records can be sent to the contact below and are fulfilled at the request of the site administrator.
6. Third parties, analytics, cookies
The App uses no third-party services, no analytics, no advertising and sets no cookies. The vendor receives only aggregated installation and licensing statistics from the Atlassian Marketplace.
7. Security
Data is protected by the Atlassian Forge platform's controls (encryption in transit and at rest, isolation per installation). Confirmation records are chained with SHA-256 hashes so that modification of historical records can be detected.
8. Changes
Material changes are announced in the App's release notes on the Atlassian Marketplace; the effective date above indicates the current version.
9. Contact
Andrew Boiko, sole proprietor, Kyiv, Ukraine — andrew@andrewboyko.name