Flagstone privacy policy
Who we are
Flagstone is a read-only app for Confluence Cloud that shows open tasks and unresolved inline comments across spaces. It is published under the Monaidea name by VestaNabu LLC, 202 N Cedar Ave Ste 1, Owatonna, MN 55060, United States. Contact: support@monaidea.com.
What the app does
Flagstone shows, in one place, the open tasks and unresolved inline comments a person can see in Confluence: their own tasks by due date, a team view of open tasks per person, unresolved comments by page, a badge on each page with that page's open items, and a report macro that lists them on any page. Confluence administrators also see counts per space and a trend. Flagstone never changes anything in Confluence: it does not complete tasks, resolve comments or edit pages.
Data the app reads
Through Confluence's REST API, using only read scopes (spaces, pages, comments and tasks):
- spaces (ID, key and name);
- open tasks: their text, page, assignee, creator and due date;
- inline comments: their text, the highlighted text they refer to, author, page, creation date and whether they are resolved;
- page titles and links.
Everything shown to a person is read live as that person, so Confluence applies their own permissions: nobody sees a task or comment they could not see in Confluence. For the administrators' counts, a scheduled job reads the same kinds of data as the app and keeps only counts.
Data the app stores
Flagstone uses Atlassian Forge hosted storage, which lives inside Atlassian's infrastructure in the region of your Confluence site. It stores:
- Counts per space: the space ID and key, and the numbers of open tasks, overdue tasks and unresolved comments (also split by age: under 7 days, 7 to 30 days, over 30 days), with totals and the IDs of any spaces the app could not read.
- The results of earlier scans, counts only, for the trend.
- While a scan is running: its progress and running counts, including counts per page ID. They are replaced when the scan finishes.
- For the page badge: each page's counts (open tasks, overdue tasks, unresolved comments) under the page ID, reused for five minutes so a busy page does not ask Confluence again on every view.
The app stores no personal data and no content: no task or comment text, no page titles, no names, account IDs or email addresses. People are shown with Confluence's own user component while the page is open and are not kept. Data is deleted when the app is uninstalled, under Atlassian's Forge data lifecycle.
Data the app sends elsewhere
None. Flagstone makes no network calls outside Atlassian ("Runs on Atlassian"). There is no analytics, no telemetry and no third-party service. The app's "Tell us" link only opens your own email program, addressed to support@monaidea.com.
Logging
Operational logs (timings, counts and HTTP status codes) are written to Forge's logging, visible only to the app developer and kept for Atlassian's Forge log retention period. Logs contain no task or comment text, page titles, names, account IDs or email addresses.
Your rights and contact
Questions, access or deletion requests: support@monaidea.com. Uninstalling the app removes its stored data.