Readtrail for Confluence: Privacy Policy
Effective date: October 1, 2026 Publisher: Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA Contact: hello@greatwork.company
This policy explains what information the Readtrail app for Confluence Cloud (the "App") processes, where it is kept, and the choices people have. It covers only the App, not Atlassian's products, which are governed by Atlassian's own privacy policy.
1. Summary
- The App runs entirely on Atlassian's Forge platform ("Runs on Atlassian"). It has no servers of its own and sends no data to Great Work or to any third party, including analytics or AI services.
- It stores read confirmation requests, who is asked, who confirmed which page version and when, and a tamper-evident record of those events in Forge SQL for your site.
- Great Work LLC cannot see your pages, your confirmations or your record.
2. What the App processes
| Data | Why | Where it lives |
|---|---|---|
| Per page with a request: page id, title, space key, due dates, the version that counts, the reset setting, optional quiz questions and right answers, who asked | Showing the banner, deciding who still has to confirm | Forge SQL for your site, until uninstall |
| People and groups asked (account ids, group ids and names) and, per person: when they were asked, the version they confirmed and when, whether they can view the page, reminder counts | Status, reports, reminders | Forge SQL, until uninstall (people who leave a group are kept, marked inactive, so the record stays complete) |
| The record: per page, each request, change, reminder, escalation, confirmation and failed quiz attempt, with time, account ids, page version and a hash chain | Proof for audits; checking the record has not been changed | Forge SQL, until uninstall |
| Policies (label or top page, people and groups, due days) and settings (compliance manager groups, reminder timing) | Configuration | Forge SQL, until changed or uninstall |
| Quiz answers | Checked on the server to allow a confirmation | Not stored; only "right" or the number of wrong answers |
| Names, page lists and permissions for reports | Shown on screen and in CSV exports built in the browser | Read from Confluence when a report is opened, as the person opening it; not stored |
The App does not collect email addresses, IP addresses, browser or device data, passwords, API tokens or payment information. It sets no cookies and loads no third-party scripts. It does not read page content.
3. Changes the App makes in Confluence
It posts reminder and escalation comments on pages with a request (they mention the people concerned, so Confluence notifies them) and deletes its own previous reminder comment when your admins keep only the latest one. It never edits or deletes pages.
4. Where data is stored
All App data is stored by Atlassian in Forge SQL for your site, subject to Atlassian's data residency settings. Atlassian is the hosting provider and acts as a subprocessor under Atlassian's terms. Great Work LLC uses no other subprocessors.
5. Who can see what
- Your own status on a page and your reading list: you.
- A page's list of people and its record: people who may ask for confirmations on that page (page editors or only space admins, as your admins choose), space admins and compliance managers.
- Space reports: that space's admins, compliance managers and Confluence admins, and only pages they can view.
- Site reports, person and group lookups: compliance managers and Confluence admins.
- Settings: Confluence admins only.
- Great Work LLC: no access. If you open a support request, we see only what you send us.
- Atlassian: as the platform operator, under Atlassian's privacy policy.
6. Personal data reporting and closed accounts
Every week the App reports the account ids it stores to Atlassian's personal data reporting API. When Atlassian reports an account as closed, the App deletes that person's status rows and blanks their account id in the record. The record keeps a salted digest so it still verifies.
7. Your choices
- People who manage a request can stop asking, remove people and change settings.
- Confluence admins can turn reminders off and change every setting.
- Requests about personal data held by the App go to your Confluence admins, who control it. Great Work LLC will help them on request at hello@greatwork.company.
8. Retention and deletion
Uninstalling the App removes its Forge SQL data according to Atlassian's Forge data deletion process. Export the record (CSV) before uninstalling if you need to keep it.
9. Security
Data is protected by Atlassian's Forge platform (encryption in transit and at rest, tenant isolation). Every report and action checks permissions on the server and reads Confluence as the person asking. See our security self-assessment on request.
10. Changes
We will post changes to this policy on this page and update the effective date. Material changes will be noted in the App's release notes.
11. Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company.