Since 2009
TELCOMA Global / Seat Reclaim for Confluence / Privacy policy
What the app reads, what it keeps, and what it changes.
This policy describes what Seat Reclaim for Confluence does with your data.
1
What the app is
Seat Reclaim for Confluence ("the app") is an Atlassian Marketplace app that helps a Confluence Cloud administrator find licensed users who have created or edited nothing in Confluence over a chosen period and, after the administrator confirms, free their seats by removing them from the groups that grant Confluence. It runs entirely on Atlassian's Forge platform.
2
What data the app processes
The app reads the following from your Confluence Cloud site, using the permissions granted at installation:
- User directory data: account ID, active status and account type while a scan runs; display name and email address (where the user's Atlassian profile makes it visible to apps) only when the list, history or an export is displayed. None of these except the account ID are written to storage.
- Global permissions and group membership: which groups hold the "Can use", Confluence admin or site admin permission, which of those groups each listed user belongs to, whether an account can still use Confluence after a reclaim, and the site's licensed user count.
- Content activity metadata: for recently modified pages, blog posts, comments, attachments, whiteboards and databases, who created or last edited them and when, and the author and date of each version of pages and blog posts. The app reads this to determine who contributed and when. It does not read page or blog post text, comment text, or attachment contents.
3
What the app changes
Only group membership on your Confluence site, and only for users an administrator selects and confirms. A reclaim removes the user from the groups that grant Confluence which the app planned; an undo adds them back to exactly those groups. Both calls run as the signed-in administrator, and Confluence itself only allows site administrators to make them. The app never deactivates or deletes accounts, never changes pages, spaces or permissions, and never changes any other setting.
4
What data the app stores
The app stores, in Forge's Atlassian-hosted storage within your site's data residency region:
- Scan progress (cursors, counters, timestamps) and the list of groups that grant Confluence at scan time.
- For each inactive user: the Atlassian account ID, the IDs of the access groups they were in at scan time, and an inactivity band derived by the app.
- A history of reclaims and undos: the account ID of the user affected and of the administrator who acted, when, which groups were changed, whether Confluence confirmed the seat as free, and the outcome.
- The protected list: account IDs an administrator has chosen to protect from reclaim.
- The yearly seat price an administrator enters. This is a setting, not personal data.
Display names and email addresses are not stored; they are read from Confluence each time they are shown. The app never stores page or blog post content, comment text, attachments, or any text authored by your users.
5
Where data goes
Nowhere. The app makes no network requests outside Atlassian and has no servers of its own. Data does not leave your Atlassian site's hosting region. If an administrator uses the app's Rovo agent, the agent passes report and history data (names, inactivity bands, access groups, reclaim status and the seat price) to Atlassian Rovo, which writes the answer within Atlassian under your agreement with Atlassian. The agent cannot reclaim, undo or protect anyone.
6
Legal basis and roles
You (the customer) are the data controller for the personal data on your site. TELCOMA Global is a data processor acting on your instructions, which consist of installing the app, running scans, and confirming reclaims and undos. Where the GDPR applies, the app's processing is performed under your instructions and on Atlassian's infrastructure.
7
Retention and deletion
Report data persists until the next scan replaces it. The history keeps the most recent 1,000 reclaims and undos; older entries are deleted automatically. The protected list and seat price stay until an administrator changes them. When the app is uninstalled, Forge deletes all app storage for your site. You may also request deletion by contacting us.
8
Security
The app runs on Atlassian Forge, which enforces the app's permissions at the platform level, hosts its storage, and isolates it from other apps. Its one write permission is used only for the group changes described above, made as the signed-in administrator after they confirm. Security issues may be reported to [email protected]; please do not post them publicly.
10
Changes to this policy
We will update this policy when the app's data handling changes and note the effective date above.