Task Roundup for Confluence: Privacy Policy

Publisher: Quietcog. Contact: gb1@mail.grokbot.com Quietcog's general privacy policy, terms and refund policy are on this website. This page describes what the Task Roundup app itself does. It is written in plain language and is not legal advice.

Summary

Task Roundup runs entirely on Atlassian's Forge platform, inside your own Confluence Cloud site. It reads tasks through Confluence's own REST API, as the person viewing the page, to show them in a list. The only thing it writes is "saved views" (a name and filter settings) in Forge storage. It sends nothing to Quietcog or to any third party, and it has no analytics or advertising.

What the app can access (permissions)

The app asks your Confluence admin for these Forge permissions at install time:

The app has no permission to create, edit, complete or delete tasks, pages, blog posts or spaces. It declares no external network access and uses no remote servers.

What the app reads

When someone opens the Task Roundup page or macro, the app calls these Confluence REST API endpoints on that person's behalf, so Confluence's normal page and space permissions apply:

• GET /wiki/api/v2/tasks: task records, filtered by status and, for "assigned to me", by the viewer's Atlassian account ID. For each task the app uses: task ID, status, the task text (read from the task body, then shortened to a preview), due, created, updated and completed dates, the assignee's and creator's Atlassian account IDs, and the IDs of the containing page or blog post and space.
• GET /wiki/api/v2/pages, GET /wiki/api/v2/blogposts and GET /wiki/api/v2/spaces: titles, space names and space keys for the items that contain those tasks.

This data is held in memory only while the request is handled and while your browser shows the list. The app does not copy it into Forge storage, does not write it to logs, and does not send it anywhere other than back to your browser. The task list shows assignee names through Atlassian's own user component, which is rendered by Atlassian. The app loads at most 2,000 tasks per view.

What the app stores

The app stores one record in Forge hosted storage (key-value store), under the key views:v1. It holds a list of up to 20 "saved views". Each saved view contains only:

• name: the view name a user typed (up to 60 characters).
• filters: status, assignee (one of anyone, me, unassigned), due, sort, groupBy, spaceId (a numeric space ID or "all"), and query (the search text a user typed, up to 100 characters).

Saved views are shared across the whole Confluence site: anyone who can use the app can see, create, replace or delete them. The app is designed to store no account IDs, no task text, no page titles and no other personal data. Because view names and search text are free text, please do not type personal or sensitive information into them.

Separately, when a Confluence editor configures the Task Roundup macro, Confluence stores the macro's default filter choices (status, assignee mode, due, sort, grouping) as part of that page. That is stored by Confluence, not by the app's own storage.

Where the data lives

All data stays in Atlassian's Forge infrastructure: the app's code runs on Forge, and saved views are kept in Forge storage on Atlassian's infrastructure. Where that data is stored follows Atlassian's Forge data residency; see Forge data residency in Atlassian's documentation. Quietcog does not run any servers for this app and does not receive a copy of your data.

Who we share data with

Nobody. The app makes no outbound network requests of its own and uses no third-party services, subprocessors, analytics, advertising or AI services. Atlassian provides the platform the app runs on, and Atlassian's own terms and privacy policy govern that platform. We do not sell data.

Logs and diagnostics

If an error occurs, the app writes a short message to its Forge log containing only a fixed label and, where available, an HTTP status code (for example status=403). It never logs task text, titles, names or account IDs. Atlassian's Forge platform may also keep its own operational logs and metrics about app invocations under Atlassian's policies; Quietcog does not control those.

Retention and deletion

• Task, page and space data read by the app is not retained by the app (see above).
• Saved views stay in Forge storage until a user deletes them or the app is uninstalled.
• After the app is uninstalled, app data is deleted by Atlassian under its Forge data-retention policy. See Data lifecycle for Forge-hosted storage in Atlassian's documentation. Reinstalling the app does not automatically restore old saved views.
• To delete saved views yourself, delete them in the app. Quietcog does not run a server for this app and cannot read your site's saved views, so we cannot access or delete them for you; to request deletion of data Atlassian holds, contact your Confluence administrator or Atlassian.

Your purchase and support

Task Roundup is sold through the Atlassian Marketplace. Atlassian processes the payment and gives Quietcog sales and license information through the Marketplace partner tools (for example license ID, the customer organization's name and contact details Atlassian chooses to share, app name and sale amount). We use it to run licensing, support and accounting. Quietcog does not receive card details. Refunds follow the Atlassian Marketplace's own process; see our refund policy.

If you email us for support we keep the message and our reply to help you and to improve the app. You can ask us to delete that correspondence by emailing gb1@mail.grokbot.com

Licensing check

The app checks the license status that Atlassian supplies with each request (active or not) to decide whether to show the list. It does not send license information anywhere.

Cookies and tracking

The app's code sets no cookies and includes no analytics or tracking. The app is displayed inside Confluence, so Atlassian's own cookies and policies apply to your Confluence session.

Who is responsible

Quietcog, not Atlassian, is responsible for what the Task Roundup app does with data it can access, as described on this page. Quietcog will tell Marketplace customers and Atlassian about material changes to this policy.

Children

The app is for workplace use and is not directed to children under 13.

Changes

If the app's data practices change (for example new permissions or new stored fields), we will update this page and the date above before releasing the change.