Markdown & RAG Export for Confluence: Privacy Policy
1. What the app accesses
When a user starts an export, the app reads the following through the Confluence Cloud REST API, as that user and only within that user's permissions:
- page content (storage format), titles, versions, labels and the page hierarchy;
- space key and name;
- attachment metadata (file name, type, size, download link). Attachment files themselves are not downloaded.
The app's OAuth scopes are read-only: read:page:confluence, read:space:confluence, read:hierarchical-content:confluence, read:label:confluence, read:attachment:confluence.
2. Where processing happens
- Conversion to Markdown and JSON chunks, and creation of the ZIP file, happen in the user's browser, inside the app frame hosted by Atlassian (Forge Custom UI).
- The ZIP file is saved to the user's own device. No file is sent to Sipki, LLC. After download the user controls the file, including any later upload to a third-party service such as an AI assistant, and is responsible for that.
- One Atlassian-hosted Forge function checks the app's licence status. It receives no page content.
- The app declares no external network access (no egress, no remote back ends) and uses no app storage. It runs no third-party analytics or tracking.
3. What we, the publisher, receive
Nothing from your Confluence content. Atlassian may give us standard Marketplace information about the licence (for example the site, licence tier and billing or technical contacts) under the Atlassian Marketplace Partner Agreement. We use it only to provide licensing and support. If you contact support, we receive what you choose to send and use it only to answer you.
4. Logs
The app does not write page content to logs. Atlassian platform logs are subject to Atlassian's own policies.
5. Data location
We hold no Confluence data. Processing takes place on Atlassian-hosted infrastructure for your site and in the browser on the user's device, so data location follows your Atlassian site and the user's device.
6. Retention and deletion
The app stores nothing, so there is nothing for us to delete. Uninstalling the app removes it completely. Licence and support records we receive are kept as long as needed for the purposes above and as required by law. Requests: see Data requests.
7. Security
Please report vulnerabilities to support@sipkigroup.com. We aim to acknowledge reports within 2 business days. If we become aware of a security incident affecting the app, we notify Atlassian within 48 hours. We follow the Atlassian Marketplace Security Bug Fix Policy.
8. Children
The app is a business tool and is not directed at children.
9. Changes
If this policy changes, we will update this page, the version and the effective date. If a change would ever introduce data processing outside Atlassian and the user's browser, we will announce it in the Marketplace listing before release.
10. Contact
Sipki, LLC, New York, USA. E-mail: support@sipkigroup.com.
Confluence, Atlassian and Forge are trademarks of Atlassian. This app is an independent product of Sipki, LLC.