Privacy policy

Salesforce Saver helps you find unused and misassigned Salesforce licenses. This page explains what we collect and why.

What we read from Salesforce

With the access you grant, we only read, and we read:

• User records: name, username, email, profile, license type, last login and creation dates.
• License counts, permission set and package licenses, profile and permission set access to Opportunities, Leads and Cases.
• Connected app names and usage counts, installed AppExchange packages, org limits, and sandbox names and refresh dates.
• How many records each user created or edited in the last 90 days, and when each installed package's objects last changed. These are counts and dates only.
• Your own Salesforce subscription, when the connected user has the Manage Billing permission: contract number, dates, renewal and billing terms, and invoice dates and totals. We never read payment card details.

We do not read or store the contents of your accounts, contacts, leads, opportunities, cases or files, and we never write to your org. Every query is listed on our security page.

What we store

• Your email address, for sign-in.
• Salesforce access and refresh tokens, encrypted with AES-256-GCM.
• A snapshot of the data above for each scan, so you can see results and history.
• Billing status from Stripe. We never see or store card numbers.

Service providers

• Supabase hosts our database (London, UK) and handles sign-in.
• Netlify runs the app (United States).
• Stripe processes payments.
• Anthropic (Claude) receives any contract PDF you upload to fill in your prices. Uploaded PDFs are not stored by us.

Deleting your data

Disconnecting an org revokes our tokens in Salesforce and deletes its scans immediately. To delete your account entirely, email support@salesforcesaver.com.