Tidyfield

Privacy policy: Inherit Edit Restrictions for Confluence

Last updated: 4 November 2026.

Who we are

Tidyfield ("we", "us"), which is run by an independent developer, publishes the Inherit Edit Restrictions for Confluence app ("the app") on the Atlassian Marketplace. Contact: privacy@tidyfieldapps.com.

What the app does with data

The app runs entirely on Atlassian Forge, inside Atlassian's cloud infrastructure, in the data residency region of your Atlassian site. We do not operate servers of our own that receive your data. The app has no external network access.

To do its job the app reads and writes the following inside your Atlassian site:

  • Page metadata: page ids, titles, parent and ancestor relationships, status, the account id of the page creator.
  • Content restrictions: the lists of users (account ids) and groups (group ids and names) who can view or edit pages.
  • Space keys and ids, and whether the current user is a space or site admin.
  • The app's own Atlassian account id.

The app stores, in Forge Key-Value Storage inside your site's region:

  • Settings you choose (site and space level).
  • Records of pages the app has managed (page id, space id, a fingerprint of the editor list the app wrote, the creator's account id when kept as an editor, timestamps).
  • An audit log of changes (page id and title, space key, account ids and group ids before and after, who triggered the change, timestamps, reason). Kept for 365 days.
  • Run records for tree operations (page ids and titles, decisions, timestamps). Kept for 30 days.
  • Items needing attention (page id and title, reason). Kept for 90 days.

The app never reads or stores the body of any page, attachments, comments, or personal data beyond Atlassian account ids and display names shown by Confluence itself.

Data we receive

We do not receive your data. Forge logs generated by the app (technical messages with page ids and error codes, no page content) are stored by Atlassian and visible to us through the Forge developer console for 14 days for support and debugging. We do not export them.

When you contact support, we receive what you send us (for example your site URL and screenshots). We keep support correspondence for up to 2 years.

We process data only to provide the app's functionality, which you request by installing and configuring it, and to respond to support requests. We do not use data for analytics, advertising or profiling, and we do not sell data.

Sub-processors

Atlassian Pty Ltd (Forge hosting, storage and logs) under the Atlassian Developer Terms and your own Atlassian agreement. Our support mailbox is hosted by Zoho Mail.

Retention and deletion

Data in Forge storage stays inside your Atlassian site. Atlassian deletes an app's storage 28 days after the app is uninstalled. Audit entries expire after 365 days, run records after 30 days, attention items after 90 days. You can ask us to help delete specific records at any time.

Your rights

Depending on where you are, you may have rights to access, correct, delete or restrict processing of your personal data. Because the data lives inside your organisation's Atlassian site, your Atlassian administrator can usually act on these directly; we will assist on request. EU and UK residents may complain to their data protection authority.

Security

The app follows Atlassian's Marketplace security requirements, requests only the permissions it needs, and keeps no data outside Atlassian. We report security incidents to Atlassian and affected customers within the timeframes required by the Marketplace Partner Agreement.

Changes

We will post changes here and note the date above. Material changes will be announced in the app's Marketplace version notes.