Provider: Karelia Labs, Sweden ("we", "us")
Contact for privacy questions: support@karelialabs.atlassian.net
Version / date: 1.0 / 2026-10-18
1. What this policy covers
Q&A Knowledge Base ("the App") is an app for Atlassian Confluence Cloud built on the Atlassian Forge platform. It lets people in an organisation ask and answer questions, vote, tag, moderate, search, and import and export questions. This policy explains what personal data the App handles and what we, the provider, do and do not receive.
2. The short version
- The App runs entirely on Atlassian's infrastructure (Atlassian Forge, "Runs on Atlassian"). It does not send customer data to us or to any third party.
- We cannot read the data stored by the App or the questions and answers in a customer's Confluence. We do not receive questions, answers, comments, user names or email addresses from the App.
- Questions, answers and comments are stored by Confluence. The App stores a limited amount of additional data in Forge storage on the customer's site, described below, and deletes some of it automatically.
3. Data handled by the App on the customer's site
| Data | Examples | Purpose | Where | Retention |
|---|---|---|---|---|
| Questions, answers, comments | Titles, texts, authors and times | The Q&A itself | Confluence (as Confluence content of the customer's site) | Under Confluence's rules; users and moderators can delete posts in the App |
| Atlassian account ids | Author of a post, voter, watcher, owner of an inbox, the person who closed a question | Attribute posts, count one vote per person, in-app watching and inbox | Forge storage on the customer's site | While the post, vote or watch exists; account ids of accounts that Atlassian reports as closed are removed (see section 8) |
| Post metadata | Space key, times, tags, vote counters, accepted answer, closed or duplicate state | Lists, search, status | Forge storage | Until the post is deleted or the App is uninstalled |
| Votes and watches | Who voted +1 or -1 on which post; who watches which question | Counters, "my votes", in-app watching | Forge storage | Until removed, the post is deleted, or the account is reported closed |
| Inbox entries | What happened (new answer, comment, accepted, closed, mention), question id, id of the account that acted, time | In-app notifications | Forge storage | 90 days, then deleted automatically |
| Group cache | A user's group names and administrator flag | Speed | Forge storage | A few minutes |
| Configuration | Enabled spaces, role rules with group names | Settings | Forge storage | Until changed or uninstall |
| Imported author names | Display name of the original author, taken from the CSV file the administrator imports | Show who wrote an imported post | Forge storage | Until the post is deleted or uninstall |
| Import files | The rows of a CSV file during an import | Resumable import | Forge storage | Deleted when the import finishes or is cancelled; at most 3 days |
| Temporary export data | The CSV file an administrator exports, in chunks | Read by that administrator's browser, which builds the file for download | Forge storage | 15 minutes |
The App does not request or store email addresses, profile pictures or other profile data. Names that appear in the App are read from Confluence when needed. Users may themselves type personal data into questions, answers, comments and tags; that data is then handled as described above. The App itself calls no AI model. The optional Rovo agent and action run on Atlassian's Rovo platform; the action returns text found in Confluence to Rovo, and Atlassian's terms apply to what Rovo does with it.
4. Data we receive as the provider
- Support requests: if you contact support we receive what you send us (typically name, email address, site URL and the problem description). We use it to answer you and keep it as long as needed for support and legal obligations for at most 24 months after the last message, unless a longer period is required by law (for example bookkeeping rules). Please do not send us questions or answers from your Confluence unless we ask for an example.
- Marketplace transactions: purchases, licences and billing are handled by Atlassian under the Atlassian Marketplace terms. We receive licence and sales information from Atlassian as described in the Marketplace Partner Agreement, such as site, tier and contact details of the technical and billing contacts.
- Website: the Karelia Labs website sets no cookies and uses no analytics or trackers.
5. Roles and legal basis
For data handled by the App on the customer's site, the customer decides why and how it is used and is the controller. Atlassian hosts and processes it as the customer's processor under Atlassian's terms and the Forge Data Processing Addendum. Because the App's code runs on that platform and we have no access to the data, we do not process the customer's personal data on our servers. For the support requests you send us, we are the controller of that correspondence.
For our own data (support, partner and billing contacts) we are the controller. The legal basis is our contract with you and our legitimate interest in running and supporting the App, and legal obligations (bookkeeping).
6. Sub-processors and recipients
We use no sub-processors for customer data. Atlassian (platform, hosting, billing, Marketplace) acts under its own terms. Support requests, whether sent through our support portal or by email, are handled in Atlassian's Jira Service Management, with Atlassian as our processor under its Data Processing Addendum.
7. International transfers
Customer data stays where the customer's Atlassian product keeps it; the Forge storage used by the App follows the data residency of the host product. Our own support data is stored in Atlassian's cloud. Atlassian may process it outside the EU/EEA, for example in the United States, and protects such transfers with the EU Standard Contractual Clauses and its certification under the EU-U.S. Data Privacy Framework.
8. Retention and deletion
- Inbox entries are deleted automatically after 90 days. Import files are deleted when an import ends; the temporary export data after 15 minutes.
- Users can remove their votes and stop watching a question. Authors and moderators can delete questions, answers and comments; the App then deletes its own data about the post (votes, watches, tags, indexes). Confluence applies its own rules (such as a trash) to the deleted content.
- Uninstalling the App removes its stored data from the customer's site according to Atlassian's Forge data retention rules. What Confluence keeps of the custom content created by the App is governed by Confluence.
- The App uses Atlassian's personal data reporting process: it reports the account ids it stores to Atlassian at least every 7 days. For accounts that Atlassian reports as closed, the App deletes their votes, watches and inbox, and removes the account from post metadata (the posts remain, without a link to the account). Names typed into a CSV file by an administrator are not account ids and are removed when the post is deleted.
- Export: download as a CSV file. The file is built in your browser from data in Forge storage, so nothing leaves Atlassian. The temporary export data is deleted from Forge storage after 15 minutes. Only the administrator who created the export can read it, and the App has no web address that serves exports. The downloaded file is on the administrator's device, outside the App; the customer decides how it is stored and shared.
9. Security
The App follows the Forge security model: it requests only granular scopes, makes Confluence requests with the permissions of the acting user (the one exception is described in the Marketplace listing: a moderator removing another person's comment), enforces roles on the server, validates and limits all input, reduces post text to a small allow-list of formatting, logs no question text deliberately and uses no external services. Its one Custom UI page (the export) runs under Atlassian's default content security policy and loads nothing from outside the App. Data in transit and at rest is protected by the Forge platform. We handle vulnerabilities within Atlassian's required time limits and notify Atlassian of security incidents within 48 hours.
10. Your rights
Under the GDPR you may have the right to access, correct, erase, restrict or object to the processing of your personal data, to data portability, and to complain to a supervisory authority (in Sweden: Integritetsskyddsmyndigheten, IMY). For data stored by the App or Confluence on a customer's site, please contact the administrator of that Atlassian site first; for our own data contact support@karelialabs.atlassian.net.
11. Children
The App is a business tool and is not directed at children.
12. Changes
We will update this policy when the App's data handling changes and publish the new version with a new date. Material changes are announced in the release notes.