Sproutline for Confluence: Privacy Policy
Effective date: October 1, 2026 Publisher: Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA Contact: hello@greatwork.company
This policy explains what information the Sproutline app for Confluence Cloud (the "App") processes, where it is kept, and your rights. It covers only the App. It does not cover Atlassian's products, which are governed by Atlassian's own privacy policy.
1. Summary
- The App runs entirely on Atlassian's Forge platform ("Runs on Atlassian"). It has no servers of its own and sends no data to Great Work or to any third party. The PlantUML engine, its Graphviz layout and the bundled standard libraries are inside the App; nothing is loaded from a CDN, and diagram source is never sent to a PlantUML rendering server.
- Great Work LLC cannot see your Confluence content, including your diagrams.
- The App stores your diagrams and their versions in your own site's Forge app storage.
2. What the App processes
| Data | Why | Where it lives |
|---|---|---|
| Diagrams: PlantUML source, the light and dark SVG pictures and a PNG of each saved version, the version note, the title and the optional include name | To show, edit, compare, include and export diagrams | Forge app storage on your site, until deleted or the App is uninstalled (the newest 100 versions per diagram are kept) |
| Atlassian account id of the person who saved each version, and the time | Version history | Forge app storage on your site, with the diagram |
| The id of the page or blog post a diagram belongs to, and its space id | To check page permissions | Forge app storage on your site |
| Page titles, read as the viewing person | To list shared includes with the page they live on | Not stored; read on request |
| A page's body (as Atlassian Document Format), read and saved as the signed-in person, only when they use "Convert PlantUML to Sproutline" | To find PlantUML on the page and replace the chosen blocks with Sproutline diagrams | Not stored by the App; the page is saved as a normal Confluence version |
The App does not collect email addresses, IP addresses, passwords, API tokens, payment information or analytics. It sets no cookies and loads no third-party scripts, styles or fonts.
3. Where data is stored
Diagrams are stored by Atlassian in Forge storage associated with your Confluence site, subject to Atlassian's data residency settings for Forge apps. Atlassian is the hosting provider and acts as a subprocessor under Atlassian's terms. Great Work LLC uses no other subprocessors for the App.
4. Who can access it
- People on your site: a diagram can be opened only by people who can view the page it belongs to, changed only by people who can edit that page, and used as an include only by people who can view the page the included diagram belongs to.
- Great Work LLC: no access to App storage or your content. If you open a support request, we only see what you choose to send us (for example a screenshot or a .puml file).
- Atlassian: as the platform operator, under Atlassian's privacy policy.
5. Retention and deletion
Diagrams remain until the App is uninstalled; each diagram keeps its newest 100 versions. Uninstalling removes app storage, including diagrams, according to Atlassian's Forge data deletion process. Download diagrams (.puml, SVG or PNG) first if you want to keep them.
6. Support requests
If you contact support by email, we process the information you send (name, email, message, attachments) only to answer you. Support data is kept for up to 24 months and then deleted. You may ask us to delete it sooner.
7. Your rights
Depending on where you live (for example the EU/UK GDPR or US state privacy laws), you may have the right to access, correct, delete or port personal data, and to object to processing. The only personal data in app storage is the Atlassian account id on each version. Your site admins control it; for support data, email hello@greatwork.company. We respond within 30 days. For support data, Great Work LLC is the controller.
8. Security
The App uses only Atlassian-hosted compute and storage, requests three permissions (app storage, read pages, write pages), reads and writes Confluence as the signed-in person, checks page permissions on every read and save, refuses pictures that reference anything outside the diagram, never fetches remote includes, and keeps no secrets of its own. Report vulnerabilities to hello@greatwork.company.
9. Children
The App is a business tool and is not directed to children under 16.
10. Changes
We will post changes on this page and update the effective date. Material changes will also be announced in the App's release notes on the Marketplace.
11. Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company