Privacy Policy

Last updated: November 3, 2026

This policy explains what data the Treelock app for Confluence Cloud ("Treelock", "the app") handles and how. Treelock is provided by Javier Sivack, an independent developer based in Uruguay ("I", "me"). Contact: javier@sealionstudios.com.

Summary

• Treelock runs entirely on Atlassian's Forge platform. It doesn't send data to any server outside Atlassian.
• It reads page restrictions and the page tree, and writes edit restrictions. It does not read page content.
• It stores only Confluence IDs and settings, never page titles, page content or names of people.
• I don't sell data, share it for advertising, or use it to train AI models.

What the app accesses

To do its job, Treelock uses the Confluence REST API inside your site to:

• read a page's parent, child pages and space (IDs only are kept);
• read and write a page's edit restrictions, which contain the account IDs of users and the IDs of groups allowed to edit;
• read the app's own account ID (Confluence requires the app to include itself in restrictions it writes);
• check whether the person using the app's screens can administer the space or edit the page.

Restriction data is read and written in Confluence; Treelock does not keep a copy of the lists of users and groups.

What the app stores

Treelock keeps a small amount of data in Forge storage, which is hosted by Atlassian:

• Space settings: whether Treelock is on in each space, and when that was last changed.
• Inheritance marks: the IDs of pages whose edit restrictions were written by Treelock.
• Recent activity: the last 30 actions per space (time, type of action, page IDs, and an error code if something failed).

Forge storage is managed by Atlassian under its own security and privacy terms. When the app is uninstalled, Atlassian deletes this data after its standard retention period for Forge storage (about 30 days).

Logs

Like every Forge app, Treelock writes short technical logs to Atlassian's platform (for example: event type, page ID, success or error code). Atlassian keeps these logs for a limited time. I can view them only to investigate problems. They contain no page titles or content.

Information from the Atlassian Marketplace

When you install or buy Treelock, Atlassian shares licensing information with me, such as your site, license type and the technical and billing contacts on the license. I use it only to manage licenses, provide support, and send important notices about the app. Payments are handled by Atlassian; I never receive card details.

Support requests

If you email me, I receive your email address and whatever you include in the message. I use it only to answer you, and delete support emails when they are no longer needed, at the latest two years after the conversation ends.

This website

This website is hosted by Vercel, which may log technical data such as IP addresses to operate and protect the service. The site uses no cookies, analytics or tracking.

Personal data and your rights

The only personal data the app processes are Atlassian account IDs inside the restrictions it reads and writes in your own site, plus the contact data described above. Treelock doesn't store account IDs itself. You can ask me to access, correct or delete personal data I hold about you by emailing javier@sealionstudios.com. I'll answer within 30 days.

Subprocessors

• Atlassian: runs the app (Forge), stores app data and logs, handles billing.
• Vercel: hosts this website.
• SiteGround: support email.

Changes

If this policy changes in a meaningful way, I'll update the date above and, for important changes, notify license contacts by email.