Privacy Policy
In one paragraph. Clone Space for Confluence runs entirely inside Atlassian. It does not send your content, or anything about your content, to us or to anyone else. We cannot read your pages. The only data the app keeps is a short record of each copy you run, which stays in Atlassian's own storage inside your site, and which is deleted when you uninstall the app.
The rest of this document says the same thing precisely, because a security reviewer at your company will want the precise version.
1. Who is responsible
Spacewright publishes the app and is responsible for how the app processes your data. Atlassian is responsible for the Confluence Cloud service the app runs inside, and for the storage the app uses. Atlassian's own privacy commitments are at atlassian.com/legal/privacy-policy.
2. What the app accesses
The app reads, from the Confluence site it is installed on, only what a copy requires:
| Accessed | Why |
|---|---|
| Space names, keys and identifiers | To identify the space being copied and to name the new one |
| Page titles, identifiers and hierarchy | To reproduce the structure |
| Page bodies | To reproduce the content |
| Attachments and embedded images | To reproduce them on the copied pages |
| Labels | To reproduce them on the copied pages |
| Space permission assignments | To report how many exist, and to request the same access configuration on the new space |
Two limits worth stating. The app reads the list of pages to copy as the signed-in user, so a page you cannot see is never read and never copied. And the app holds no permission to delete anything in Confluence, at all.
3. What the app stores, and where
The app stores one record per copy, in Atlassian's Forge key-value storage. That storage lives inside your Atlassian site, in your site's own region, and is isolated per installation by the Atlassian platform.
Each record contains:
- the source and destination space keys and identifiers
- the number of pages, attachments and labels copied
- the title of the most recently copied page, so progress is readable
- the titles of any pages that were skipped, with the reason
- the Atlassian account identifier of the person who started the copy
- timestamps, status, and an error message if one occurred
It does not contain page bodies. Page content passes through the app in memory while a copy runs and is never written to the app's own storage.
The account identifier is a pseudonymous identifier issued by Atlassian. The app uses it for one purpose: to confirm that the person asking about a copy is the person who started it.
4. How long it is kept
- One record per space. When a new copy of the same space is started, the previous record is deleted.
- On uninstall, everything. Atlassian deletes an app's storage when the app is uninstalled.
There is no backup, archive or secondary copy, because there is nowhere outside Atlassian for one to exist.
5. What leaves Atlassian: nothing
The app sends no data to Spacewright, to any analytics service, to any artificial intelligence service, or to any other third party. It makes no outbound network calls of any kind. All processing happens on Atlassian-hosted compute.
This is not only a policy. It is a structural property of how the app is built, and Atlassian verifies it: the app qualifies for Atlassian's Runs on Atlassian programme, which requires Atlassian-hosted compute and storage and prohibits data egress.
6. Sub-processors
None. There are no sub-processors, because no data is processed anywhere outside the Atlassian infrastructure your Confluence site already runs on.
7. Operational logging
The app writes diagnostic log lines, which are retained by Atlassian and visible only to us through Atlassian's developer tooling. These lines contain counts, identifiers, phase names and status values.
They never contain page titles, page bodies, attachment contents, space names, user names or email addresses. Error messages are built from HTTP status codes and Atlassian's own error text, never from response bodies.
8. Your rights
Because the app stores no personal data outside your own Atlassian site, requests to access, correct, export or erase personal data are satisfied by your control of that site:
- Erasure: uninstall the app, and its stored records go with it. Or start a new copy of the same space, which replaces the previous record.
- Access and export: the data is in your site, under your administration.
If you believe we hold data about you and want to ask about it, write to privacy@spacewright.net and we will answer within 30 days.
9. Security
- No credentials, API keys or tokens are stored by the app. It authenticates only through Atlassian's own mechanisms.
- Data at rest is encrypted by Atlassian as part of the Forge platform.
- Vulnerability reports: security@spacewright.net. Please allow 90 days before public disclosure.
10. Children
The app is a business tool, sold to organisations, and is not directed at children.
11. Changes
Material changes will be posted here with a new effective date before they take effect. The Marketplace listing always links to the current version.
12. Contact
Spacewright is a sole proprietorship based in Kansas, United States.
Write to privacy@spacewright.net for any privacy question, including a request for our postal address, which we will provide on request.