Privacy Policy — Confluence app

Who the controller is

The app is published by R M Porto Silva Servicos Tecnologicos, a company registered in Brazil under CNPJ (national taxpayer registry) number 28.421.511/0001-04, trading as RM Porto Tech. Privacy contact: contato@rmportotech.com.br.

Summary

The app does not collect, transmit or store your content. It runs entirely inside Atlassian's cloud infrastructure and renders everything in the reader's browser. RM Porto Tech has no access to the pages it is used on.

What the app processes

The app adds three macros to Confluence. Each macro holds the text you type into it — a Mermaid diagram definition, Markdown, or a LaTeX formula — plus a theme setting.

That text is stored by Confluence as part of the page, in your own Atlassian site, under Atlassian's control and your organisation's retention rules. We do not receive a copy of it and we do not operate any database, cache or storage of our own.

When a page is displayed, the macro text is read by code running in your browser and converted into a diagram, formatted text or a formula. The conversion happens locally, in the browser tab. Nothing is uploaded anywhere to render it.

When a page is exported to Word, Confluence passes the macro text to a function running on Atlassian's Forge platform, which converts it into document content and returns it to Confluence. That function runs on Atlassian infrastructure, processes the text in memory, and keeps nothing.

What the app does not do

• It requests no Atlassian API scopes. It cannot read your pages, spaces, users, attachments or any other content beyond the text inside its own macros.
• It makes no requests to external servers. All rendering libraries are bundled with the app; nothing is loaded from a CDN or a third-party service.
• It sets no cookies and contains no analytics, tracking or advertising.
• It does not transmit your content outside your Atlassian site.
• It does not write page content to logs.

The app qualifies for Atlassian's Runs on Atlassian programme, which means Atlassian itself verifies that it stores no data outside Atlassian's cloud and makes no egress to external services.

Permissions the app requests

One: permission to apply inline styles to its own content (content.styles: unsafe-inline). Diagram rendering writes style attributes directly into the generated image; without this permission the browser's security policy strips them and diagrams appear unstyled. This permission grants no access to data.

Data we do receive

If you buy a paid licence, Atlassian provides us with licence and billing information as part of the Marketplace transaction: the account or organisation name, the technical and billing contact details, the licence tier and its dates. We use it only to fulfil the purchase, to comply with tax obligations, and to provide support. We do not sell it, rent it or use it for unsolicited marketing.

If you contact support, we receive whatever you choose to include in your message. Please do not send confidential page content; a description or a redacted screenshot is enough to diagnose a rendering problem.

Subprocessors

Atlassian Corporation, as the platform on which the app runs and through which it is sold. We use no other subprocessor for app data.

Retention

We hold no app content, so there is nothing to retain or delete on our side. Licence and support records are kept for as long as the commercial relationship lasts and afterwards only as long as tax and accounting law requires.

Your rights

Under the GDPR, the LGPD and comparable laws you may request access to, correction of, or deletion of the personal data we hold about you, and object to its processing. Write to contato@rmportotech.com.br and we will respond within the period the applicable law sets. For data held inside your Confluence site, Atlassian is the processor and your own administrator is the controller — those requests go to them, not to us.

Security

The app holds no credentials and no data at rest. It inherits the security controls of the Atlassian Forge platform, including tenant isolation. Markdown content is sanitised before it is placed on the page, so a macro cannot be used to inject scripts.

Children

The app is a business tool and is not directed at children.

Changes

We may update this policy. The version in force is always the one published on this page, and material changes are noted in the app's Atlassian Marketplace listing.

Contact

R M Porto Silva Servicos Tecnologicos (RM Porto Tech) — CNPJ 28.421.511/0001-04 — contato@rmportotech.com.br. Questions about the website rather than the app are covered by the website privacy policy.

Portuguese version: abrir a pagina em portugues.