WikiMint Privacy Policy

Version: 2.1 · Effective date: 7 September 2026 · Publisher: Detent Point LLC, Washington, USA
Contact and security contact: Support@detentpoint.com

1. What the app does

WikiMint is a Confluence Cloud app (Atlassian Forge). You paste source code into a macro; the app sends it to the WikiMint generation service, receives generated documentation, renders it in the macro, and — on your explicit click — writes it into a Confluence page in your space as you.

No AI or large language model is involved. The service parses your code with deterministic language tooling (the PowerShell SDK, Roslyn for C#, and bundled parsers for Python, Go, Java and COBOL) and renders documentation from what the parser finds. Your code is never sent to a model provider.

2. Data we process, and our role for each

2.1 Source code you paste — we are your processor

• Sent to: the WikiMint generation service at wikimint.grayocean-4062ad43.eastus.azurecontainerapps.io (Microsoft Azure, US East), operated by Detent Point LLC. The request is made server-side by the app’s Forge function, authenticated with the app’s own service credential, over TLS.
• Content: the code exactly as pasted (up to 1 MB), the language you selected (PowerShell, C#, Python, Go, Java or COBOL), and the optional module name. If your code contains names, e-mail addresses, credentials or other personal data, those are transmitted too — do not paste secrets.
• Processing: parsed to produce the documentation. The Forge function does not log or store submitted code. The generation service holds submitted code in memory and, for the duration of parsing, in a temporary file on the container’s local disk that is deleted when parsing finishes. Submitted code is not written to logs, to the service’s usage records, or to any database, and is discarded when the response is returned. If parsing fails, the parser’s error message is logged; such a message may name an identifier or token from your code but never the code itself.
• Not used for: training any model, marketing, or disclosure to anyone other than the sub-processors in §5.

2.2 Generated documentation — we are your processor

• The documentation returned for each macro instance is stored in Atlassian Forge app storage, scoped to your Atlassian site and keyed to that macro instance, so the page re-renders on view. It is derived from your code. Storage is best-effort: very large results may not persist, in which case the macro shows the result but does not restore it on reload. It remains until the macro instance is removed or the app is uninstalled; Forge app storage is removed by Atlassian after uninstall in accordance with Atlassian’s Forge data-retention terms. Detent Point LLC does not access this storage in the ordinary course of operating the app.
• When you click Create Confluence page, the documentation is written into a Confluence page as you, under your permissions. That page is ordinary Confluence content you own.

2.3 Site and request metadata — we are the controller

With each generation request the app sends your Atlassian site identifier (cloudId), the app installation identifier, and the app’s licence state. The service uses these to apply per-site rate limits and fair use, to operate the service, and for billing support. It keeps a per-site count of generations for the current calendar month (UTC); the previous month’s counts are discarded when a new month starts. Each request also produces a structured log line — request id, endpoint, site identifier, licence state, duration and outcome — held in Azure Monitor for 30 days. Logs contain no personal data by design. No user identity, name or e-mail is sent or recorded.

2.4 Data the app does NOT collect

• No user account data, names, e-mail addresses or profile information from Confluence.
• No Confluence page content other than: the metadata of the page hosting the macro (to obtain its space id); the existence and version number of a page with the target title in that space; and the pages WikiMint itself creates or, with your confirmation, replaces.
• No browser analytics or telemetry. Our service records the per-request metadata described in §2.3.

3. External services (egress)

No other external hosts are contacted. The egress is declared in the app manifest and shown to your administrator at install time.

4. Confluence permissions (scopes) and why

5. Sub-processors

No other vendor receives any data from Confluence requests.

Stripe is not used for Confluence customers; billing is by Atlassian. We will post notice on this page and in the Marketplace listing’s release notes at least 30 days before adding a sub-processor that handles submitted code (see §9 for how notices are given).

6. Retention

• Forge app storage: life of the macro instance, or until uninstall.
• Confluence pages written by the app: yours; governed by your Confluence retention.
• Generation service: submitted code — duration of the request only (memory and a temporary file deleted after parsing); per-site monthly counts — current calendar month; request logs — 30 days in Azure Monitor.

7. Security

• Traffic is encrypted in transit (TLS 1.2 or higher). Requests larger than 1 MB are rejected. The service credential is held server-side in Forge and is never sent to the browser.
• Page writes run as the current user under Confluence permissions. Generated text is escaped before it is written to Confluence.
• Breach notification: if we become aware of a personal-data breach affecting your data, we will give notice without undue delay and in any case within 72 hours of becoming aware, by the means in §9 and, where the breach affects a specific site, by a notice shown in the WikiMint macro on that site. Because the app does not collect administrator contact details (§2.4), administrators who want direct e-mail notice should register an address with Support@detentpoint.com.
• Security issues: Support@detentpoint.com. Detent Point LLC follows Atlassian’s Security Bug Fix Policy for Marketplace apps.

8. Your rights, GDPR and CCPA

• For submitted code and generated documentation, Detent Point LLC is a processor / service provider acting on your organisation’s instructions; your organisation is the controller. For site and request metadata (§2.3) we are the controller.
• A Data Processing Agreement (incorporating the EU Standard Contractual Clauses, Module 2, and the UK Addendum) is available on request at Support@detentpoint.com.
• Processing occurs in the United States. For EEA/UK personal data we rely on the EU Standard Contractual Clauses (Module 2) and the UK International Data Transfer Addendum.
• We do not sell or share personal information as defined by the CCPA/CPRA and have not in the preceding 12 months.
• Requests to access, correct or delete personal data: Support@detentpoint.com. We respond within 30 days. Requests from your end users are routed to your organisation as controller.
• WikiMint is a business tool not directed at children under 16; we do not knowingly collect their data.

9. Changes and how we give notice

The app does not collect administrator names or e-mail addresses, so notices under this policy are given by: (1) updating this page and its effective date; (2) the Marketplace listing’s release notes; and (3) where a notice concerns a specific site, a notice shown in the WikiMint macro on that site. Administrators may also register an e-mail address for direct notice at Support@detentpoint.com. Material changes are posted at least 30 days before they take effect.

10. Contact

Detent Point LLC · Support@detentpoint.com · https://github.com/greenmtnsun/PS-Wiki-Central/issues