Dibs for Confluence: Privacy Policy
Effective date: October 1, 2026 Publisher: Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA Contact: hello@greatwork.company
This policy explains what information the Dibs app for Confluence Cloud (the "App") processes, where it is kept, and your rights. It covers only the App, not Atlassian's products, which are governed by Atlassian's own privacy policy.
1. Summary
- The App runs entirely on Atlassian's Forge platform ("Runs on Atlassian"). It has no servers of its own and sends no data to Great Work or to any third party.
- It records who checked out which attachment, and watches attachment events so it can tell people when a checked-out file is replaced. In Restore mode it re-uploads an earlier version of that file inside your Confluence.
- Great Work LLC cannot see your files, your pages, your check-outs or who used the App.
2. What the App processes
| Data | Why | Where it lives |
|---|---|---|
| Check-outs: attachment id, page id, space id and key, file name, the holder's account id, reason text, start and expiry time, accepted version, account ids of people waiting, last 20 incidents (time, account id, version) | To show and enforce check-outs | Forge app storage for your site, until released, expired, the file is deleted, or uninstall |
| Activity log: time, event type, file name, attachment, page and space ids, account ids of the person acting and the holder, version numbers | Admin activity view and CSV export | Forge app storage, 365 days, or until uninstall |
| Settings: site defaults and per-space overrides (mode, expiry hours, two on/off choices), account id and time of the last change | To apply your admins' choices | Forge app storage, until uninstall |
| Attachment metadata from Confluence (name, version, size, type) | To list files and spot new versions | In memory only |
| File contents of one earlier version | Only in Restore mode, to upload it again as the newest version | In memory for the few seconds the restore takes; never stored |
| Your account id and permitted operations on the page and space | To decide what you may check out or release | In memory only |
The App does not collect email addresses, IP addresses, passwords, API tokens, payment information or analytics. It sets no cookies and loads no third-party scripts. Reasons are whatever your users type; avoid putting secrets in them.
3. Where data is stored
All App data is stored by Atlassian in Forge app storage for your Confluence site, subject to Atlassian's data residency settings. Atlassian is the hosting provider and acts as a subprocessor under Atlassian's terms. Great Work LLC uses no other subprocessors.
4. Who can see what
- Check-outs (holder, reason, expiry) are shown to everyone who can view the page, in the banner and the page dialog.
- Notice comments the App posts are ordinary Confluence page comments, visible to whoever can see the page. They mention the people involved, which sends Confluence's usual notification.
- The activity log is visible to Confluence admins in the App's admin page. Each page's dialog shows the last 10 events for that page to people who can view it.
- Great Work LLC: no access. If you open a support request, we see only what you send us.
- Atlassian: as the platform operator, under Atlassian's privacy policy.
5. Retention and deletion
Check-outs end when released, when they expire, or when the file is deleted. Activity entries expire after 365 days. Uninstalling removes the App's Forge storage according to Atlassian's Forge data deletion process. Comments and restored file versions stay in your Confluence like any other content.
6. Support requests
If you contact support through our help desk or by email, we process what you send (name, email, message, attachments) only to answer you, keep it up to 24 months, and delete it sooner on request.
7. Your rights
Depending on where you live (for example EU/UK GDPR or US state privacy laws), you may have the right to access, correct, delete or port personal data and to object to processing. For data in your Confluence site, your organization (the Atlassian customer) is the controller and Atlassian processes it on your behalf; your admins can release check-outs or uninstall the App. For support data, Great Work LLC is the controller: email hello@greatwork.company. We respond within 30 days.
8. Security
The App uses only Atlassian-hosted compute and storage. Permission checks (can this person edit the page, administer the space) run as the signed-in user. It keeps no secrets of its own. Report vulnerabilities to hello@greatwork.company.
9. Children
The App is a business tool and is not directed to children under 16.
10. Changes
We will post changes here and update the effective date. Material changes will also be announced in the App's Marketplace release notes.
11. Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company