MARKFLOW_PRIVACY.md
commit 2026-03-20 — Last updated: March 2026
Privacy policy for LimitlessMarkFlow — a Markdown + Mermaid + Markmap editor for Atlassian Confluence.
// 01
Overview
LimitlessMarkFlow is a Confluence macro app developed by Limitless GMTech Solutions, Lda (Portugal). It provides a professional Markdown editor with live preview, Mermaid diagram rendering, and Markmap mind map visualization directly within Atlassian Confluence.
We are committed to protecting your privacy. This document explains how we handle data within the app and what information is stored.
// 02
Data Collection and Storage
LimitlessMarkFlow stores the following data entirely within your Confluence instance using the Forge Storage API. No data is transmitted externally.
- Markdown content — stored within your Confluence instance using Atlassian Forge Storage API.
- Version history — up to 20 content versions stored per macro instance.
- Whiteboard data — drawing data stored per macro instance.
- Macro configuration — user preferences (theme, view mode, toolbar settings).
// 03
What We Do NOT Collect
LimitlessMarkFlow does not:
// 04
Data Processing
All data processing happens within Atlassian's Forge platform:
- Content is stored using Forge Storage API (encrypted at rest by Atlassian).
- Data never leaves your Confluence Cloud instance.
- No third-party services or external APIs are used.
- No cookies or browser tracking.
// 05
Confluence Permissions
LimitlessMarkFlow requires the following Confluence permissions, which are the minimum required for the app's functionality:
read:confluence-content.allTo import content from Confluence pages.write:confluence-content.allTo export markdown as page body content.storage:appTo persist macro content and settings.// 06
Data Retention
- Content is retained as long as the macro exists on a Confluence page.
- Removing the macro removes all associated stored data.
- Version history is limited to 20 entries per macro.
- Uninstalling the app removes all stored data.
// 07
Security
- All data is handled through Atlassian's Forge platform security.
- The app runs in Atlassian's sandboxed environment.
- No external network requests are made.
- Content is sanitized using DOMPurify to prevent XSS attacks.
// 08
User Rights
Users can:
- View all stored content through the editor.
- Export content as Markdown files.
- Delete content by removing the macro.
- Clear version history.
// 09
Changes to This Policy
We may update this privacy policy as needed. Changes will be reflected in the “Last updated” date at the top of this page. Continued use of the app after an update constitutes acceptance of the revised policy.
// 10
Contact
For privacy concerns or data requests, reach us at: