SpaceCal Team Calendar for Confluence runs on Atlassian Forge. It has no back end of its own, no web trigger and no external calls, and it sends nothing outside your Atlassian site.
The app calls Confluence as the person using the macro. It reads the space (to check you can see it), your permissions in that space (to check you can add pages) and, when you export, the display names of the people on events.
Everything is kept in Forge SQL, the app's database on Atlassian's platform.
| Record | Contents | Kept for |
|---|---|---|
| Event | Space ID, calendar name, title, notes, colour, dates or times, the time zone it was entered in, version, and the account IDs of who created it and who changed it last | Until someone deletes it, or the app is uninstalled |
| Event people | Account IDs of the people on an event | As long as the event |
| App setting | Where the daily personal data report left off | Until the next report |
No email addresses or avatars are stored. Exports aren't stored either. When you export, the app looks up display names, builds the .ics text and hands it straight back to your browser, and nothing from it is written to the database.
Once a day the app sends the account IDs it stores to Atlassian's personal data reporting API. When Atlassian reports an account as closed, the app removes it from every event's people and replaces it as creator or last editor with a placeholder.
It doesn't change pages or comments, send email, use analytics or share data with the developer or anyone else.
Uninstalling the app removes its Forge SQL data. Deleting an event removes it and its people list straight away.