⚡ BoltForce Privacy Policy

1. Overview

BoltForce ("we", "our", "the extension") is a Chrome extension for Salesforce developers and administrators. It provides tools for SOQL queries, metadata inspection, data export, flow analysis, and org management — all operating directly between your browser and your Salesforce org.

This Privacy Policy describes what data BoltForce accesses, how it is collected, how it is handled, how it is stored, and who (if anyone) it is shared with. It covers all versions of the BoltForce Chrome extension (Item ID: feeiocnepphphmlklimfiholidibdgcn).

2. Data Collection

This section describes all data that BoltForce accesses or collects, including what is stored locally and what is accessed temporarily during use.

2a. Data Stored Locally in Your Browser

BoltForce stores the following data exclusively in Chrome's local storage on your device using the chrome.storage.local API. This data is never transmitted to any external server, never synced to the cloud, and never shared with any third party.

Data Type	What Is Collected	Why It Is Collected	Retention Period
User Preferences	Theme (light/dark), default API version, CSV separator, keyboard shortcut config, feature visibility flags	Restore your settings on each popup open	Until you clear extension data or uninstall
SOQL Query History	Last 50 SOQL queries you have executed	Let you quickly re-run recent queries	Rolling 50-query window; cleared on "Clear History"
Saved Queries	SOQL queries you explicitly save, with names and descriptions	Quick access to frequently used queries	Until you delete them or uninstall
Recent Records	Record IDs, names, and object types of recently viewed Salesforce records — stored per org	Quick navigation to recently accessed records	Rolling 50-record window per org; cleared on "Clear History"
Connection State	Last used Salesforce org URL, org type indicator (Production/Sandbox)	Auto-detect the active org on popup open	Overwritten each session; cleared on uninstall
Session State	Last active tab/panel in the extension UI	Restore your last view when you reopen the popup	Overwritten each session; cleared on uninstall

2b. Data Accessed In-Memory Only (Not Stored)

The following data is accessed temporarily in-memory during your session to power extension features. It is never written to any storage and never transmitted externally. It is discarded when the extension popup closes.

• Salesforce session token — read from browser cookies solely to authenticate API requests to your Salesforce org.
• Salesforce API responses — query results, metadata, record data. Displayed in the extension UI only.
• Active tab URL — read to detect if you are on a Salesforce page and to infer context for features such as object filtering.

2c. Data We Do NOT Collect

• Personal information (name, email address, phone number, physical address)
• Salesforce org data sent to any external server
• Passwords or security tokens stored persistently
• Usage analytics, telemetry, or event tracking of any kind
• Browsing history outside Salesforce domains
• IP addresses
• Device fingerprints or hardware identifiers
• Location data
• Crash reports sent to any external service

3. Data Handling

This section describes how BoltForce uses and processes all data it accesses.

Purpose of Data Use

All data accessed or stored by BoltForce is used solely to provide the extension's core features to you within your own Salesforce org. Specifically:

• User preferences are used only to restore your chosen settings when you open the extension.
• Query history and saved queries are used only to display those queries back to you for re-use.
• Recent records are used only to display your recently accessed records for quick navigation.
• Salesforce session tokens are used only to authenticate API calls directed to your own Salesforce org.
• Active tab URL is used only to detect the current Salesforce context and pre-populate relevant fields in the extension.

Data Processing Location

All data processing occurs entirely within your browser. There are no BoltForce servers. API calls go directly from your browser to your Salesforce org.

No Secondary Use

BoltForce does not use collected data for any secondary purpose beyond providing the extension's stated functionality. Data is never used for:

• Advertising or remarketing
• Profiling or behavioral analysis
• Training machine learning models
• Any purpose unrelated to operating the extension's features

Sensitive Data Handling

Salesforce Session Cookies (cookies permission):

• Read read-only solely to obtain the current Salesforce session ID for making authenticated REST API calls.
• Never stored persistently in Chrome storage, local storage, or any external system.
• Only transmitted to Salesforce domains (*.salesforce.com, *.force.com) as part of authenticated API calls — never to any other destination.
• Used in-memory only and discarded when the extension popup closes.

Chrome Identity API (identity permission):

• Used only to support OAuth-based authentication flows when connecting to Salesforce orgs that require it.
• No identity tokens or OAuth credentials are stored beyond the active session.
• No identity data is transmitted to any server other than Salesforce's own authentication endpoints.

4. Data Storage

This section describes where data is stored, for how long, and the security measures in place.

Storage Location

All data stored by BoltForce resides exclusively in Chrome's chrome.storage.local API on your local device. This storage:

• Is isolated to your Chrome profile on your local machine
• Does not sync to Google's servers or any cloud service
• Is not accessible to other extensions or websites
• Is automatically deleted when you uninstall BoltForce
• Never leaves your device

Data Retention

Data Type	Retention Period	How to Delete
User Preferences	Until cleared or uninstalled	Extension Settings → Clear All Data, or uninstall
SOQL Query History	Rolling last 50 queries	Extension Settings → Clear Query History
Saved Queries	Until you delete them or uninstall	Saved Queries panel → delete individual entries, or Clear All Data
Recent Records	Rolling last 50 per org	Recent tab → Clear, or Clear All Data
Session Tokens (in-memory only)	Discarded when popup closes — not stored persistently	N/A — not stored persistently

Security Measures

• All API communication uses HTTPS (TLS encryption)
• Session tokens are handled in-memory only — never written to disk or persistent storage
• No external servers or databases are operated by BoltForce
• No third-party SDKs, analytics libraries, or CDN-hosted scripts are included in the extension
• The extension operates in Chrome's sandboxed extension environment

5. Data Sharing

This section describes who receives data through BoltForce and under what circumstances.

Entities That Receive Data

The complete list of entities that receive any data through BoltForce is:

• Your Salesforce Org only — API requests are made on your behalf using your own authenticated Salesforce session. This is functionally identical to you using Salesforce directly in a browser tab. No BoltForce intermediary handles this data.

Entities That Do NOT Receive Data

BoltForce does not share data with:

• BoltForce or SCube Solutions servers (we operate no backend servers)
• Analytics providers (Google Analytics, Mixpanel, Amplitude, etc.)
• Advertising networks or ad tech platforms
• Data brokers or data aggregators
• Social media platforms
• Crash reporting or monitoring services (Sentry, Datadog, etc.)
• Cloud storage providers (AWS, Google Cloud, Azure)
• Any other third-party service or company

We do not sell personal data. We do not monetize user data in any form. We do not share data for cross-context behavioral advertising.

6. Chrome Web Store Limited Use Compliance

Specifically, BoltForce confirms that data accessed via Chrome extension permissions is:

• Used only to provide the extension's stated features — no secondary use of any kind
• Not transferred to third parties except as necessary to provide the core functionality (Salesforce API calls directed to your own org)
• Not used or transferred for serving advertisements
• Not used or transferred to determine creditworthiness or for lending purposes
• Not sold under any circumstances
• Not used for unauthorized secondary purposes beyond operating the extension's core features

7. How BoltForce Accesses Salesforce

8. Permissions and Their Purpose

Permission	Why It Is Required	Data Accessed
activeTab	Detect when you are on a Salesforce page; read the current page URL for contextual features (record detection, object filtering)	Active tab URL and page metadata only
cookies	Read Salesforce session cookies to authenticate API requests to your org	Salesforce session token (in-memory use only, never stored)
storage	Save user preferences, query history, and recent records locally in your browser	Preference data and query history — local only, never synced
identity	Support OAuth authentication flows for connecting to Salesforce orgs	OAuth tokens used in-memory for Salesforce auth only
scripting	Inject UI enhancements on Salesforce pages: field tooltips, keyboard shortcuts, quick-copy features, command palette	Page DOM metadata (field names, record IDs visible on the page)
contextMenus	Add right-click menu options for quick actions (Export Record, Clone Record, etc.)	Selected text and record context from the active Salesforce page
alarms	Schedule periodic background checks for flow errors and deployment status monitoring features	No user data — used only to trigger internal background tasks
Host Permissions (*.salesforce.com, *.force.com, *.cloudforce.com, *.visualforce.com, *.salesforce-setup.com)	Make authenticated API calls to Salesforce and inject UI enhancements on Salesforce pages	Only Salesforce domains — no data sent to non-Salesforce destinations

9. Your Data Rights and Controls

Access

All data BoltForce stores is directly visible and accessible to you within the extension:

• Preferences: Extension popup → Settings tab
• Query History: Extension popup → Query History panel
• Saved Queries: Extension popup → Saved Queries panel
• Recent Records: Extension popup → Recent tab

Deletion and Opt-Out

• Delete specific items: Remove individual queries, records, or settings inline within the extension
• Clear all stored data: Extension Settings → "Clear All Data" removes all locally stored preferences, history, and records
• Uninstall: Removing BoltForce from Chrome automatically and permanently deletes all locally stored extension data
• Opt out of query history: Disable query history tracking in Extension Settings
• Opt out of recent records: Disable recent records tracking in Extension Settings

Export

• Export saved queries: Settings → Export Queries (JSON)
• Export query history: Query History → Export as JSON

GDPR Rights (EU/EEA Users)

Because BoltForce stores all data locally on your device and collects no personal data on external systems, the following GDPR rights are inherently satisfied:

• Right of Access: All stored data is visible to you in the extension
• Right to Erasure: Clear all data via extension settings or uninstall
• Right to Data Portability: Export functionality available for queries and history
• Right to Object: No profiling or automated decision-making occurs

There is no external data controller to contact for erasure requests because no personal data is held externally. For any concerns, contact us at scubedevelopmentteam@gmail.com.

CCPA Rights (California Residents)

• BoltForce does not sell personal information
• BoltForce does not share personal information for cross-context behavioral advertising
• No personal information is collected that would require a CCPA "Do Not Sell" opt-out

10. Children's Privacy

BoltForce is a developer tool intended for professional use by Salesforce administrators and developers. It is not directed at children under 13 years of age (or under 16 in the EU). We do not knowingly collect personal information from children. Because BoltForce collects no personal information from any user, this is not a practical concern.

11. Third-Party Links

BoltForce may provide links to external resources including Salesforce Setup pages, our GitHub repository, and Salesforce documentation. We are not responsible for the privacy practices of these external sites. Please review their respective privacy policies.

12. Open Source Transparency

BoltForce's source code is publicly available for review. You can independently verify all privacy claims by inspecting the code directly.

Repository: github.com/shivamshukla2010/boltforce-salesforce-toolkit

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the extension's features or to comply with legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Update the version number in the Chrome Web Store listing
• Note significant changes in the extension's changelog

Continued use of BoltForce after changes to this policy constitutes acceptance of the updated policy.

14. Legal

Jurisdiction

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the jurisdiction of courts in India.

Compliance

• Chrome Web Store Developer Program Policies
• General Data Protection Regulation (GDPR) — European Union
• California Consumer Privacy Act (CCPA)
• Salesforce's Terms of Service and API Usage Policy

Data Controller

• Developer: Shubham Shukla
• Organization: SCube Solutions
• Email: scubedevelopmentteam@gmail.com