Privacy Policy — Space Blueprints for Confluence
Publisher: Matify App: Space Blueprints for Confluence (Atlassian Confluence Cloud) Contact: mira.maty@web.de Effective date: 17 September 2026 · Last updated: 17 September 2026
1. Who this policy covers
This policy explains how the Space Blueprints for Confluence app handles data when it is installed on an Atlassian Confluence Cloud site. The site's own organisation remains the controller of the content in Confluence. Matify provides the app that processes a defined, narrow subset of that data on the organisation's instruction.
Atlassian's own handling of your Confluence data is governed by Atlassian's Privacy Policy.
2. What the app processes
Read and used, not stored
- Page content, attachments and custom content inside a blueprint space. These are copied by
Confluence's own server-side copy task when a space is provisioned. Content never passes through the app's code and is never stored by the app.
- Display names, when the interface needs to show who requested or approved something. They are fetched
for rendering and discarded.
Stored by the app
- Space metadata: id, key, name, type, status, homepage id, page count, last activity date.
- Blueprint definitions, naming policies and app settings that an administrator created.
- Space requests: the proposed name and key, the purpose text the requester typed, the chosen owner,
and the approval decision and its reason.
- Atlassian account ids of requesters, approvers, space owners and the actor on each audit entry.
- Hashes of a space's role assignments and labels, used to detect drift. The underlying permission
detail is not retained.
- An append-only audit trail of requests, approvals, provisioning steps and configuration changes.
Never processed
- Email addresses, profile information, IP addresses or device data.
- Page content, comments or attachments as stored data.
- Any data from products other than the Confluence site the app is installed on.
3. Why
The app processes this data solely to provide its function: to define blueprints, to accept and approve space requests, to provision spaces, to keep an inventory with owners and review dates, to detect drift from a blueprint, and to keep an auditable record of all of it. There is no profiling, no advertising, no training of models and no secondary use.
4. Where the data is held
Entirely within Atlassian's platform. The app uses Forge hosted storage, which is pinned to the region of the Confluence site the app is installed on. Matify operates no servers and holds no copy.
5. Sharing and international transfer
The app shares data with nobody. It has no subprocessors, makes no external network calls, and sends nothing outside Atlassian's platform. Because data stays in the Atlassian region of your site, the app introduces no additional international transfer.
6. Retention
| Data | Retained |
|---|
| Audit entries | 24 months by default, configurable between 6 and 60 months |
| Inventory snapshots | the newest twelve per space |
| Space requests | until deleted by an administrator |
| Blueprints, naming policies, settings | until deleted by an administrator |
7. Deletion and your choices
- An administrator can delete individual blueprints, policies, requests and audit ranges at any time.
- Delete all app data removes everything the app stores, in one confirmed action.
- Uninstalling the app causes Forge to remove its storage. Spaces, pages, labels, space properties
and role assignments created while the app was installed remain in Confluence: they are your content.
8. Personal data requests
The app implements Atlassian's personal data reporting interface. Atlassian can ask the app which account ids it holds and when each was last updated, and can instruct the app to erase an account id. On erasure the app removes that id from its stored records. It does not delete spaces, pages or other customer content in response to an erasure request, because that content belongs to the organisation rather than to the app.
To exercise a right in relation to data held by the app, contact your Confluence site administrator, or write to mira.maty@web.de.
9. Security
The app runs on Atlassian-hosted compute and storage, requests only the permissions its features require, validates all input server-side, checks administrator rights in the backend rather than only in the interface, keeps an append-only audit trail, and holds no credentials or secrets of its own. It never deletes a customer space or page. The full technical statement is published at the Data Security and Privacy Statement link below.
10. Children
The app is a workplace administration tool and is not directed at children.
11. Changes
Material changes to this policy will be published at this URL with a new "last updated" date, and noted in the app's release notes.
12. Contact
mira.maty@web.de — privacy questions, data requests and security reports.
Related: Data Security and Privacy Statement · https://matify25.github.io/matify-public/apps/space-blueprints-for-confluence/security-privacy/