Linktally for Confluence: Privacy Policy
Effective date: October 1, 2026 Publisher: Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA Contact: hello@greatwork.company
This policy explains what information the Linktally app for Confluence Cloud (the "App") processes, where it is kept, and the choices people have. It covers only the App, not Atlassian's products, which are governed by Atlassian's own privacy policy.
1. Summary
- The App runs entirely on Atlassian's Forge platform ("Runs on Atlassian"). It has no servers of its own and sends no data to Great Work or to any third party, including analytics or AI services. It never visits external links.
- It reads your pages and blog posts to find links between them and keeps an index of those links in Forge storage for your site.
- When someone relinks pages, the App keeps the earlier page text for 90 days so the change can be undone.
- Great Work LLC cannot see your pages, your links, or the index.
2. What the App processes
| Data | Why | Where it lives |
|---|---|---|
| Link index: for each page and blog post, its id, space key, title, version and heading names; for each internal link on it, the target page id, title or space key as written, anchor, file name, link text (up to 255 characters) and the URL as written | Incoming links, broken link reports, relinking | Forge SQL for your site, updated as pages change |
| Relink history: who ran it (Atlassian account id), when, what it changed, page ids and titles, version numbers, and the page text before the change | Undo, and a record of what changed | Forge SQL, deleted after 90 days |
| Settings: excluded space keys, old site addresses, who may relink, byline count on or off | Configuration | Forge SQL until changed or uninstall |
| Scan progress: when it started, counts, the account id of the admin who started it | Status display | Forge SQL, replaced by the next scan |
| Page titles, space names and permissions shown on screen | Displayed in the macro, dialog and reports | Read from Confluence when opened, as the person opening it; not stored beyond the index above |
The App does not store external link destinations as anything other than text, does not visit them, and does not collect email addresses, IP addresses, browser or device data, passwords, API tokens or payment information. It sets no cookies and loads no third-party scripts.
3. Where data is stored
All App data is stored by Atlassian in Forge storage for your site, subject to Atlassian's data residency settings. Atlassian is the hosting provider and acts as a subprocessor under Atlassian's terms. Great Work LLC uses no other subprocessors.
4. Who can see what
- Incoming links (macro and byline): anyone who can view the page, and only linking pages that person can open. Confluence decides this for every request.
- Broken link reports: anyone who can view the space, and only pages in it that person can open. A link's target is described from the linking page's own text, so the report never reveals the title of a page the person can't see.
- Relink: space admins and Confluence admins by default, or anyone who can edit the pages if a Confluence admin allows it. Every change is made as that person, so Confluence's own edit permissions apply. Relink history: the person who ran it, space admins and Confluence admins.
- Settings and full scans: Confluence admins only.
- Great Work LLC: no access. If you open a support request, we see only what you send us.
- Atlassian: as the platform operator, under Atlassian's privacy policy.
5. Your choices
- Confluence admins can exclude spaces (their pages are removed from the index the next time they change, or at once with Clear and rebuild), choose who may relink, and hide the byline count.
- Requests about personal data held by the App (account ids in relink history and scan status) go to your Confluence admins, who control it. Great Work LLC will help them on request at hello@greatwork.company.
6. Retention and deletion
Relink history and the page text kept for undo are deleted after 90 days by a daily job. The link index is replaced as pages change and rebuilt by a weekly scan. Uninstalling the App removes its Forge storage according to Atlassian's Forge data deletion process.
7. Security
Data is protected by Atlassian's Forge platform (encryption in transit and at rest, tenant isolation). Every screen checks permissions on the server and reads Confluence as the person asking. See our security self-assessment on request.
8. Changes
We will post changes to this policy on this page and update the effective date. Material changes will be noted in the App's release notes.
9. Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company.