Privacy Policy

Read & Confirm ("the App") is a Confluence Cloud application developed by MiddleCore. This Privacy Policy explains how we handle user data.

Data collection

What we collect. The App collects and stores the following data to provide its functionality:

• Confirmation request data: request settings, target page IDs, creator information, deadlines, and messages
• Confirmation records: user account IDs, confirmation timestamps, and request associations

What we access. The App accesses the following Confluence data:

• User account IDs and display names
• Page titles and IDs
• Space information

Data storage

All data is stored using Atlassian Forge Storage, which is hosted entirely within Atlassian's secure infrastructure. Data stored includes:

• Confirmation requests created by administrators
• Individual confirmation records (who confirmed and when)
• Request metadata (deadlines, messages, target settings)

Data retention: data is retained as long as the associated confirmation request exists. When a request is deleted, all associated confirmation records are also deleted.

Data sharing

We do not share, sell, or transfer any data to third parties. All data remains within Atlassian's infrastructure.

Sub-processors

The App does not use any sub-processors. All processing occurs within Atlassian's Forge infrastructure.

Security

Read & Confirm is built on Atlassian Forge, which runs entirely within Atlassian's secure cloud infrastructure. No data leaves Atlassian's environment.

Key security features:

• Backend code (resolvers) executes within Atlassian's serverless infrastructure
• Frontend runs in a sandboxed iframe within your browser
• No external network requests are made
• All data stored within Atlassian Forge Storage
• Access controls ensure only authorized users can view confirmation data

GDPR compliance

For users in the European Economic Area (EEA):

• Legal basis: processing is based on legitimate interest to provide confirmation tracking functionality
• Data minimization: we only collect data necessary for the confirmation workflow
• No external transfer: no data is transferred outside of Atlassian's infrastructure
• Right to access: users can view their own confirmation status through the App
• Right to deletion: administrators can delete confirmation requests, which removes all associated data
• Right to information: you may contact us at contact@middle-core.com for any privacy-related inquiries

CCPA compliance

For California residents:

• We do not sell personal information
• We collect only the minimum information necessary to provide the service
• For questions, contact us at contact@middle-core.com

Your rights

You have the right to:

• View your own confirmation status through the embedded macro
• Request information about what data we store related to you
• Request deletion of your data by contacting your Confluence administrator

For data-related requests, please contact your organization's Confluence administrator or reach out to us directly.

Children's privacy

The App is not intended for use by children under the age of 16. We do not knowingly collect any information from children.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact

If you have questions about this Privacy Policy, please contact:

MiddleCore
Email: contact@middle-core.com

This privacy policy is effective as of April 2026. Last updated: April 2026.