ReadSeal

Privacy policy

ReadSeal, the Confluence app published by OwlWorks. In force since 20 September 2026.

Who we are

ReadSeal is published by OwlWorks, a French simplified joint-stock company (SASU) registered at 105 rue Dragon, 13006 Marseille, France, under SIRET 100 439 413 00012. You can write to us at contact@owlworks.dev.

The short version

Our role and yours

ReadSeal is software you install in your own Atlassian site. The organisation that installs it decides which pages must be confirmed, by whom, how long the records are kept, and who may read them: that organisation decides the purposes and is the data controller. OwlWorks provides the software; it operates no server of its own for it and does not access the data the app holds for your site. Atlassian hosts and stores that data as part of its own cloud services, under your agreement with Atlassian.

What the app handles

DataWhy
Atlassian account identifiers of the people asked to confirm, of the managers who launch, seal or edit a campaign, and of the person who removes someone from a campaignAsk the right people, show them the right screen, and say who did what
Confirmations: page, version number, date and time, and a fingerprint of the attestation text acceptedThe evidence the app exists to produce
Group membership, read from Confluence when a campaign is launched or refreshedTurn a group into a list of recipients
Whether a person can open a given pageTell a manager who cannot confirm, rather than chasing them

Display names are read from Confluence when the app writes a campaign page, held in memory for at most ten minutes, and never written to storage. Email addresses are never read or stored.

The campaign pages the app writes are ordinary Confluence pages: they show the names of the people concerned, as your Confluence does everywhere else, and they belong to you.

Where it is stored

In Atlassian's Forge hosted storage, inside Atlassian's cloud, following the data residency of your Confluence site. ReadSeal declares no external host: no data is sent to OwlWorks or to any third party. There is no sub-processor besides Atlassian.

How long

Your rights

If you were asked to confirm a page and want to know what is recorded about you, ask your own Confluence administrator or the manager of the campaign: they can see your record in the app and in the campaign pages, and they are the ones who decide what happens to it. OwlWorks cannot identify you in a customer's site, and has no access to that data; a request sent to us can only be forwarded to the customer concerned.

Deleting your Atlassian account causes the app to erase the identifiers it holds for you, through Atlassian's reporting mechanism described above.

Cookies and tracking

The app sets no cookie of its own and measures nothing. These pages set no cookie either and load nothing from a third party. They are served by GitHub Pages, which logs requests as any web host does.

Security

What the app stores, which permissions it asks for and what it refuses are described on the security page. To report a vulnerability, write to contact@owlworks.dev.

Changes

If this policy changes, the new version appears here with its date, and a material change is announced in the app's release notes on the Atlassian Marketplace.

Contact

contact@owlworks.dev, OwlWorks, 105 rue Dragon, 13006 Marseille, France.