Privacy policy · Page Tree Markdown Export

In short

The app runs entirely on Atlassian’s platform (Forge). I don’t run any servers or databases for it, and it sends nothing anywhere outside Atlassian.
It reads your Confluence pages to convert them to Markdown. It can’t change or delete anything in Confluence.
It stores the converted Markdown in your site’s app storage until you download it, and deletes it after 7 days, or sooner if you delete the export.
It never stores your attachments. Your browser fetches them straight from Confluence when it builds the ZIP.
There are no analytics, no tracking, no cookies and no ads, and I never sell or share your data.

Who this policy covers

This policy covers the Confluence Cloud app Page Tree Markdown Export (“the app”), offered on the Atlassian Marketplace by Christian Ortiz, an individual publishing as Christian Ortiz Studio (“I”, “me”). It explains how the app handles data on the Confluence sites where it’s installed, and how I handle the information Atlassian and you share with me.

It doesn’t cover Confluence itself, or Atlassian’s own processing of your data, which is governed by Atlassian’s privacy policy.

Questions about this policy: support@christianortiz.studio.

Where the app runs

The app is built on Atlassian Forge, which means its code runs on Atlassian’s infrastructure and its data is kept in Atlassian-hosted app storage that belongs to your Confluence site.

The app declares no external servers and makes no network requests outside your Confluence site. Its screens load nothing from third parties: no scripts, fonts or images from elsewhere.
I have no database or server of my own that holds your data.
Data residency. Forge hosted storage follows your site’s data residency: if your Confluence site is pinned to a location (such as the EU, US, Australia or Germany), the app’s stored data is kept there too, and it moves with your site if the site is migrated. The app keeps all of its data in Forge hosted storage and has no remotes or outbound requests, so it qualifies without any extra setup. Atlassian aims to run the app’s code in the same location but doesn’t guarantee it, so processing in memory may occasionally happen elsewhere within Atlassian’s infrastructure.

What the app reads

When someone starts an export, the app reads, from your Confluence site only:

The pages, page tree and blog posts in the chosen scope, including their content.
Attachment details (name, type, size), and labels if front matter is turned on.
Whether the person who started the export is allowed to view each page. Pages they can’t view are never read.

The app doesn’t look up, show or store people’s names, email addresses or profile pictures. Each person only sees their own exports.

What the app stores, and for how long

Everything below is kept in your site’s Atlassian-hosted app storage.

The Atlassian account ID of the person who starts an export. Used to show them their own exports, and nobody else’s, and to check their permissions page by page. Deleted with the export.
Page titles, their place in the tree and the converted Markdown of the exported pages. Held only so you can download the ZIP. Deleted with the export. A cancelled export keeps what it had converted until it’s deleted or expires.
Attachment details: ID, file name, type, size and its address in your Confluence site, so your browser knows what to fetch. Not the files themselves. Deleted with the export.
The export report: for each issue, the page title, macro name, a short message and a link to the page. Deleted with the export.
Export settings and progress counters. Deleted with the export.
Your preferences, stored against your account ID once you dismiss the getting-started card: that you dismissed it, alongside the standard export options. Kept until the app is uninstalled or your Atlassian account is closed.
Your tour progress, stored against your account ID when you close the in-app tour: when you first saw it, whether you finished it, and the tour’s version, so it isn’t shown again. Kept until the app is uninstalled or your Atlassian account is closed.

Every export is deleted automatically 7 days after it was started. A daily clean-up removes expired exports and everything that belongs to them. You can delete an export sooner from the app at any time, which removes it immediately.

Personal data

Atlassian account IDs are personal data. Exported pages may also contain personal data that your team wrote into them; the app treats all page content as confidential and handles it only as described here.

Once a week the app sends the account IDs it stores to Atlassian’s personal data reporting service, as Atlassian requires. When Atlassian reports that an account has been closed, the app deletes that person’s exports, preferences and tour progress.

Logs

Atlassian gives me access to the app’s logs and usage metrics so I can keep it working. The app writes only error types, HTTP status codes and counts to its logs, for example how many expired exports the daily clean-up removed. It never logs page content, page titles, file names or account IDs.

Who’s responsible for your data

For the content and account IDs the app handles on your Confluence site, your organization is the controller and I’m the processor: the app processes them only to do what your users ask. The data processing agreement sets out the terms and applies automatically.
For the licensing and contact details Atlassian shares with me, and for support emails you send me, I’m the controller.
Under the California Consumer Privacy Act, I’m your organization’s service provider. I don’t sell or share personal information.

What I receive, and what I don’t

I don’t receive your Confluence content. The app has no way to send it to me.

When your organization installs, evaluates or buys the app, Atlassian shares licensing information with me, which can include your site address, organization name, and the names and email addresses of technical and billing contacts. I use it only to manage licenses, provide support and send notices that matter (such as security notices), and I keep it only as long as I need it for those purposes and for my legal and tax records.

If you email me for support, I keep your message and email address to help you and to improve the app. I’ll delete them on request unless I need to keep them by law.

I don’t sell, rent or share your data with anyone. The only sub-processor is Atlassian, which hosts the app’s code and storage on Forge under the Forge Data Processing Addendum. There are no other third parties. I’d disclose information only if the law required me to.

Security

The app asks Atlassian only for read access to pages, spaces, attachments, blog posts, labels and page permissions, plus its own storage. It can’t change anything in your Confluence site.
Exports respect Confluence permissions: each page is checked against the permissions of the person who started the export before it’s read, and pages they can’t view are counted but never named.
Attachments are downloaded by your own browser, as you, and never pass through the app’s storage.
Security contact: email support@christianortiz.studio with Security in the subject line. I acknowledge security reports within two business days.
I don’t hold security certifications of my own, such as SOC 2 or ISO 27001. The app’s code and data run on Atlassian’s infrastructure, which Atlassian’s own audits cover.
If I learn of a security incident that affects your data, I’ll tell affected customers without undue delay.

Deleting your data

Delete an export in the app to remove it at once, or let it expire after 7 days.
Uninstall the app to remove all of its data from your site. Atlassian then deletes the app’s storage under its data lifecycle for Forge hosted storage: the data is soft-deleted when the app is uninstalled and kept for 28 days, then permanently deleted. Reinstalling doesn’t bring it back on its own; within the first 21 days it can be reconnected to a reinstalled app only if your organization asks for that. I don’t keep a copy.
Ask me at support@christianortiz.studio with your site address, and I’ll help and confirm what was removed.

Your rights

Depending on where you live, you may have the right to access, correct, delete or move your personal data, or to object to how it’s used. Because the app’s data lives in your organization’s Confluence site, the quickest route is usually through your site admin, but you can always email me and I’ll respond within 30 days.

For content in your Confluence site, your organization decides what’s stored and why; the app processes it only to carry out the exports your users ask for. The data processing agreement applies to that processing.

Children

The app is a business tool and isn’t directed at children.

Changes to this policy

If I change this policy, I’ll update the date at the top of this page. If a change affects how your data is handled in a meaningful way, I’ll also say so in the app’s release notes or Marketplace listing before it takes effect.

Contact

Christian Ortiz, publishing as Christian Ortiz Studio
support@christianortiz.studio