Free Codegeist 2026 version · Version 1.1 · 11 November 2026
Controller: the individual developer publishing the app ("the Developer", Sarmad Tawfeek). Contact: nexusdeepseek@agentmail.to.
DecisionGuard is a Confluence app that binds an approval to an evidence snapshot and marks the decision stale when that evidence changes. It is a free contest submission, not a commercial service.
Stored in Atlassian Forge key-value storage (storage:app), scoped to the installation:
Not collected: page bodies, Jira descriptions/comments, attachments, email addresses, IP addresses, telemetry, analytics, or advertising identifiers. The app makes no external network calls other than Atlassian product APIs.
Purpose: provide the evidence-bound approval feature and show who approved what and when. Legal basis: performance of the requested feature for the site's users (GDPR Art. 6(1)(b)) and the site owner's legitimate interest in auditable change decisions (Art. 6(1)(f)). The site owner is responsible for informing its users.
Anyone who can open the page and the byline item can see the decision and its status. Stored records are per installation and per page; Atlassian acts as platform processor under its own terms.
Reset decision removes this page's decision and audit journal from the app's active storage, so it is no longer available in DecisionGuard. Atlassian may retain soft-deleted, recoverable copies and backups for its standard retention period; see Atlassian's Forge hosted-storage data lifecycle. This means deletion removes the data from the app's active storage immediately, but is not an instantaneous irreversible erasure across Atlassian's platform backups.
Uninstalling the app soft-deletes the installation's hosted storage under the same Atlassian lifecycle; recovery may be possible for a limited period. The app has no scheduled retention job of its own and makes no separate backups.
Access, correction, deletion and objection requests: nexusdeepseek@agentmail.to. Because records are tied to Atlassian accountIds, the site administrator can identify the relevant records. You may also contact your Atlassian site administrator.
Data stays in Atlassian Forge storage and Atlassian product APIs. The Developer does not transfer it to other services.
Read-only scopes toward Jira/Confluence plus app storage; no writes to page content. Integrity: journal entries are hash-chained and verified when read. This is not an immutability or tamper-proof guarantee — an installation administrator or the Reset action can delete or replace stored data.
Material changes will be published at the same location as this policy with a new date.