Docs/Confluence/Privacy Policy

Privacy Policy

How Golpo AI handles your data in the Confluence integration.

Last updated: June 2026

Overview

Golpo AI for Confluence ("the App") is developed by Golpo AI - Red Tree Inc. This policy describes what data the App accesses, how it is used and shared, where it is stored, how long it is retained, and the rights you have. The App turns the Confluence content you select into narrated whiteboard-animation videos through Golpo AI's own video-generation pipeline; one step (validating the narration script) uses a third-party AI model (OpenAI), and the specific services and the data shared with each are listed below. We process only the content needed to produce the video you request, and we are committed to handling your data responsibly.

What Data We Access

Confluence Data

  • Page content: title, body text, labels
  • Page attachments: filenames, sizes, and content (only when a user selects them for video generation)
  • Space metadata: space key and name
  • Selected text (when using the context-menu feature)
  • User information: account ID and group membership (used only to verify admin access for configuration)

The App does not add contributor or author names to the script or content it sends for video generation. However, the free-text you select — page titles, body text, and selected text — may itself mention people by name; where it does, that text is processed solely to generate the video you requested.

How Data Is Used

Data accessed from Confluence is used exclusively for the following purposes:

  • Video generation: Selected page content is sent to the Golpo AI service to produce a narration script and a narrated whiteboard-animation video.
  • Attachment processing: Files you select are uploaded to the Golpo AI service for inclusion in the video.
  • Admin verification: Group membership is checked to determine who may configure the App.
  • Video library & macro embed: Generated videos and their metadata are stored so you can find, play, embed, and manage them.

We do not sell your data, use it for advertising or profiling, or use it for any purpose unrelated to providing the App.

AI Processing & Generated Content

  • When you generate a video, the text you select from Confluence is sent to Golpo AI's video-generation pipeline (hosted on AWS) to draft the script, render the animation, and synthesize the voiceover.
  • A third-party AI model (OpenAI) is used to validate the drafted narration script. We do not use your content to train Golpo AI models.
  • AI-generated scripts and videos may contain inaccuracies or omissions. You are responsible for reviewing generated output before relying on or sharing it.

Permissions Explained

PermissionWhy It's Needed
read:confluence-content.allRead page content and attachments to build video prompts
read:confluence-space.summaryAccess space metadata (key, name) for space-level browsing
read:confluence-userVerify admin group membership for configuration access
read:page:confluenceRead the selected page's details to build the video prompt
write:page:confluenceStore the selected video as a content property on the page (macro embed)
read:attachment:confluenceRead page attachments you select for a video
read:label:confluenceRead page labels for additional context
search:confluenceLocate pages within a space for browsing and bulk generation
write:confluence-propsStore macro video selections as content properties
storage:appSecurely store the Golpo AI API key (encrypted) and app configuration

Sub-Processors

To provide the App, Golpo AI shares data with the following sub-processors. We do not share your data with any other third parties, and we do not sell it.

ProviderPurposeData sharedLocation
Amazon Web Services (AWS)Cloud hosting, file storage (S3), content delivery (CloudFront), and computeSelected attachments and generated video, audio, and thumbnail filesUnited States
OpenAIScript validationText prompts derived from the Confluence content you select for a videoUnited States
SupabaseHosted PostgreSQL database for the Golpo AI backendVideo records (prompts, generated scripts, status, output URLs, metadata, and cloud_id / page-id references to the source content), account profiles, credit balances and history, and subscription detailsUnited States
Microsoft Corporation (Azure)Authentication for Golpo AI accountsGolpo AI account sign-in identifiers (e.g., email address)United States
Google LLCAuthentication for Golpo AI accountsGolpo AI account sign-in identifiers (e.g., email address)United States

The App also runs on Atlassian Forge; Atlassian processes data on its infrastructure in accordance with Atlassian's policies.

Data Retention

  • API key: stored encrypted in Atlassian Forge storage (per installation). Removed when an admin disconnects the key or uninstalls the App.
  • Prompts and generated scripts: stored as part of each video record in the Golpo AI database (Supabase) so you can view and re-edit them. Retained until you request deletion of the video.
  • Generated videos, audio, thumbnails, and uploaded attachments: stored on AWS S3 and retained until you request deletion of the video.
  • Video metadata (status, output URLs, cloud_id, page id, account, credit history): retained for the life of your Golpo AI account.
  • Macro video selections: stored as a content property on the page; removed when the macro is deleted or the selection is cleared.
  • Deletion: you can request deletion of any videos created from your account at any time by contacting us. If you request deletion of all data associated with your site or account, we will delete it within 30 days.
  • Uninstall: uninstalling the App stops further data transmission. Video records already in your Golpo AI account remain until you request deletion by contacting us.

Data Storage Location & International Transfers

Golpo AI processes and stores data primarily in the United States. If you access the App from the European Economic Area (EEA), the United Kingdom, or Switzerland, your data will be transferred to and processed in the United States. For these transfers we and our sub-processors rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent safeguards.

The App does not currently offer Atlassian data-residency pinning, because video generation requires sending selected content to the external services listed above.

Your Privacy Rights

Depending on your location, you may have rights under laws such as the GDPR (EEA/UK) and CCPA/CPRA (California), including the right to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent.

Because the App generally processes Confluence content on behalf of your organization (which is the data controller), data-subject requests are usually directed to your organization, and we will assist in fulfilling them. You may also contact us directly and we will respond within the timeframes required by applicable law (generally within 30 days).

To exercise any right, email support@golpoai.com.

Controller & Processor

  • For Confluence content processed to generate videos, your organization is the data controller and Golpo AI acts as a data processor, processing it only to provide the App and per your instructions.
  • For Golpo AI account data (profile, authentication, credits, subscription), Golpo AI is the controller.

Security

  • All communication between the App and Golpo AI services uses TLS (HTTPS) encryption in transit.
  • Data stored by Golpo AI is encrypted at rest (AWS S3 server-side encryption and Supabase database encryption).
  • The Golpo AI API key is generated in your Golpo AI account and entered in the App. It is stored in Atlassian's encrypted Forge storage and in Golpo AI's backend database (Supabase) — the same database that stores your Golpo AI account — and is used to authenticate the integration to your account and to identify and meter your usage, with backend access restricted to service-role only. It is never exposed in client-side code or returned by any API.
  • The App runs on Atlassian Forge and requests only the minimum permissions needed for its features.
  • Admin verification ensures only authorized users can configure the App.

Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

Contact

For privacy-related questions, data-subject requests, deletion requests, or a copy of our DPA, contact us at: