# Privacy Policy — Confluence Copilot

_Last updated: this document has no publish date embedded on purpose; update the "last updated"
marker in whatever page hosts this instead of relying on a version string that will drift._

## What Confluence Copilot does

Confluence Copilot is a Chrome extension that helps you draft, review, and revise content
directly inside a Confluence Server page. It reads the page you are viewing (the current
selection, the document text, and inline/talk comments) and, when you ask it to, proposes edits
that you approve before they are applied.

## What data is collected, and where it goes

- **Website content.** The text of the Confluence page you are viewing (selection, document body,
  inline and talk comments) is sent to the extension's backend so the assistant can read and
  reason about it. This only happens on pages matching the host this extension is configured for;
  the extension does not run on, or read, any other website.
- **Authentication information.** When you sign in, an OAuth token from your organization's
  identity provider is sent to the backend so it can authorize your requests. The extension does
  not store this token beyond what is needed to make the request; it does not collect passwords.
- **Your messages to the assistant.** Whatever you type into the chat panel is sent to the backend
  as part of the conversation, the same way it would be for any chat-style AI assistant.

Nothing else is collected. The extension does not track clicks, keystrokes, scrolling, browsing
history, location, or any data from sites other than the one it is built for. It does not collect
health, financial, or payment information.

## How the data is used

Collected data is used solely to power the assistant's single purpose: helping you read and edit
the Confluence page you are working on. It is not used for advertising, profiling, credit or
lending decisions, or any purpose unrelated to that.

## Sharing

Data is not sold or shared with third parties, beyond what is necessary to run the backend
service itself (the model/inference provider processing your request). No data is shared for
advertising or analytics purposes.

## Data retention

The backend does not persist page content or conversation history beyond what is needed to serve
the current request, except for standard operational logging kept for a limited period for
debugging and abuse prevention.

## Contact

Questions about this policy can be directed to the developer contact email listed on this
extension's Chrome Web Store listing.