Privacy Policy

Satori Cloud ("Satori Cloud", "we", "us" or "our") provides software that allows organisations to publish selected content from services such as Atlassian Confluence as external documentation websites and knowledge bases.

For personal information that we collect directly from you, Satori Cloud is normally the controller of that information for the purposes of UK data protection law.

Where we process information on behalf of a customer as part of providing the Satori Cloud service, that customer may be the controller and Satori Cloud may act as its processor.

The information we collect depends on how you interact with Satori Cloud.

We may use personal information to:

• create and manage your Satori Cloud account;
• provide and operate the Service;
• authenticate users and protect accounts;
• connect Satori Cloud to authorised third-party services;
• process and synchronise content at your instruction;
• provide customer support;
• diagnose errors and improve reliability;
• understand how customers use Satori Cloud;
• develop and improve features;
• communicate important service or security information;
• manage subscriptions and payments;
• prevent fraud, misuse and security incidents; and
• comply with legal obligations.

We may also use feedback and research responses to help decide how Satori Cloud should develop.

Under UK data protection law, we need a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

• Contract: where processing is necessary to provide Satori Cloud to you or take steps at your request before entering into a contract.
• Legitimate interests: where processing is reasonably necessary to operate, secure, develop or improve our business and Service, provided those interests are not overridden by your rights.
• Legal obligation: where we need to process information to comply with applicable law.
• Consent: where we specifically ask for your consent, for example for certain optional communications or cookies.

Satori Cloud can connect to third-party services such as Atlassian Confluence.

When you authorise a connection, Satori Cloud may receive access tokens and information required to communicate with the relevant third-party API.

Depending on the permissions you grant and the content you choose to publish, Satori Cloud may access information such as:

• Confluence spaces;
• page names and hierarchy;
• page content;
• images and attachments;
• content identifiers and metadata; and
• information required to synchronise published content.

We use this information to provide the functionality that you request, such as displaying available content, creating published websites and synchronising changes.

Satori Cloud does not need ownership of your Confluence content in order to provide the Service.

Your use of Confluence remains subject to Atlassian's own terms and privacy practices.

Satori Cloud allows customers to make selected content available outside their Confluence workspace.

If you publish a site publicly, information contained within that site may be accessible to anyone who can access the relevant URL.

Publicly accessible pages may also be indexed, cached, copied or otherwise processed by search engines and other third parties.

You are responsible for ensuring that content you choose to publish is appropriate for the intended audience and does not contain personal, confidential or sensitive information that should not be shared.

Where Satori Cloud provides privacy, indexing or visibility settings, you are responsible for selecting settings appropriate for the content you are publishing.

We do not sell personal information.

We may share information with trusted service providers that help us operate Satori Cloud, such as providers of:

• cloud hosting and infrastructure;
• database and storage services;
• authentication and security services;
• email delivery;
• analytics and error monitoring;
• payment processing; and
• customer support tools.

These providers may only process information as necessary to provide their services to us and are subject to appropriate contractual obligations.

We may also disclose information where reasonably necessary to:

• comply with law or legal process;
• respond to lawful requests from public authorities;
• protect Satori Cloud, our customers or other people;
• investigate fraud, abuse or security incidents; or
• complete a merger, acquisition, financing, reorganisation or sale of all or part of the business.

Some of the service providers we use may process information outside the United Kingdom.

Where personal information is transferred to a country that does not have an applicable adequacy decision, we take steps intended to provide an appropriate level of protection.

These measures may include approved contractual safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism where appropriate.

We use technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

Measures may include access controls, authentication, encryption, secure development practices, infrastructure protections, monitoring and backups.

No internet service can guarantee absolute security. You are also responsible for protecting your account credentials and controlling access to your Satori Cloud account and connected services.

If you believe your account or information has been compromised, please contact us promptly.

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing the Service, meeting legal obligations, resolving disputes and maintaining security.

Retention periods vary according to the type of information and the reason we process it.

When an account is closed, we may delete or anonymise personal information and stored content after a reasonable period, unless we are required to retain particular information for longer.

Some information may remain temporarily in backups before being automatically overwritten or deleted.

Satori Cloud may use cookies and similar technologies to operate the website and Service.

Essential cookies may be used for purposes such as:

• keeping users signed in;
• maintaining sessions;
• security and fraud prevention;
• remembering necessary preferences; and
• protecting forms and account actions.

We may also use analytics technologies to understand how the website and Service are used.

Where applicable law requires consent for non-essential cookies, those technologies should only be used after the required consent has been obtained.

Depending on the circumstances, UK data protection law may give you rights in relation to your personal information.

These may include the right to:

• request access to your personal information;
• ask us to correct inaccurate information;
• ask us to delete personal information;
• ask us to restrict certain processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing relies on consent; and
• raise concerns about how your information is being processed.

These rights are not absolute and may be subject to exemptions under applicable law.

If Satori Cloud is processing your information solely on behalf of one of our customers, we may direct your request to that customer because they are responsible for deciding how the information is processed.

You also have the right to complain to the UK Information Commissioner's Office if you are concerned about our handling of your personal information.

Satori Cloud is a business software service and is not intended for use by children.

We do not knowingly seek to collect personal information directly from children through the Satori Cloud account service.

We may update this Privacy Policy from time to time as Satori Cloud develops or our legal obligations change.

When we make material changes, we will take reasonable steps to bring them to the attention of affected users.

The date at the top of this page shows when this Privacy Policy was last updated.

If you have questions about this Privacy Policy or how Satori Cloud handles personal information, contact: