Privacy Policy & Data Protection
🛡️ 1. Executive Summary & Privacy First Promise
At SF Lens Pro, we believe that development and administrative tooling must treat enterprise security and customer privacy as non-negotiable foundations.
SF Lens Pro acts solely as a direct client bridge between your authenticated browser session and your own authorized Salesforce organizations.
📦 2. Information We Do NOT Collect
SF Lens Pro strictly adheres to the Chrome Web Store Developer Program Policies and the Limited Use requirements. Specifically:
- No Personal Identifiable Information (PII): We do not collect names, email addresses, phone numbers, or user profiles.
- No Credentials or Passwords: We do not capture or store usernames, passwords, or permanent API secrets. Session tokens are read directly from your active session memory and never transmitted outside your browser.
- No Customer Data or Salesforce Records: Any record data viewed, edited, imported, or queried (via SOQL, Metadata Explorer, or Data Import) exists strictly in temporary memory during your browser session.
- No Tracking or Analytics: We do not bundle Google Analytics, Mixpanel, Segment, Sentry, or any third-party telemetry beacons.
- No Remote Server Logging: We run zero backend servers or proxy relays. There is no remote endpoint capable of receiving your data.
🔑 3. Chrome Permissions & Plain-English Justifications
In accordance with Google Chrome Web Store policies, each permission requested by SF Lens Pro in manifest.json is strictly limited to its declared functionality:
| Permission | Technical Purpose | Plain-English Justification |
|---|---|---|
cookies |
Accesses the Salesforce session cookie (sid) on authorized domains. |
Required to authenticate direct REST, Tooling, and Metadata API calls between your browser and your Salesforce organization without requiring you to manually enter credentials. |
storage |
Stores local preferences in chrome.storage.local. |
Required to remember your UI theme preferences, editor settings, saved SOQL snippets, and feature toggle states locally on your device. |
tabs |
Queries open browser tabs matching Salesforce URLs. | Required to power the Multi-Org Browser Tabs Manager, identify the active instance URL, and open dedicated studio pages in new browser tabs. |
activeTab & scripting |
Injects lightweight UI elements upon user interaction. | Required to render the Command Palette (Ctrl+Shift+K), on-page Field API Name overlays, and quick-action drawer when triggered by the user. |
downloads |
Triggers local browser file downloads. | Required to save user-requested exports to your device (such as SOQL query CSV results, Data Dictionary Excel spreadsheets, or Metadata package.xml archives). |
browsingData |
Clears specific site cookies on user demand. | Required to enable the "Clear Cache & Re-login" quick action, allowing developers to reset expired Salesforce sessions with 1 click. |
clipboardWrite |
Copies text snippets and images directly to system clipboard upon user button click. | Required to copy annotated screenshots (PNG image blobs) from the Screenshot Annotation Studio, raw session ID tokens, Frontdoor login URLs, generated SOQL queries, and Flow/Validation formulas directly to the user's clipboard upon explicit button clicks. The extension never reads from the clipboard (clipboardRead is not requested). |
host_permissions(*://*.salesforce.com/*, *.force.com/*, etc.) |
Restricts network access exclusively to Salesforce infrastructure. | Enables the extension to make direct API requests to your Salesforce instance without CORS blocking. Access is strictly scoped to official Salesforce domains. |
⚙️ 4. How Data Is Handled Locally
All data generated or processed by SF Lens Pro is handled under the following parameters:
- Local Persistence: Configuration settings (e.g., custom keyboard shortcuts, favorite tools) are saved locally via Chrome's isolated storage APIs. This data never leaves your device.
- Session Lifecycle: When you close your browser or navigate away from a Salesforce session, in-memory tokens and query results are immediately cleared by the browser engine.
- Data Deletion: You can completely erase all data stored by SF Lens Pro at any time by uninstalling the extension or clearing extension data via
chrome://extensions.
🌐 5. Third-Party Services & Network Traffic
SF Lens Pro makes ZERO network requests to any third-party infrastructure. The extension only sends network traffic directly to:
- Your Connected Salesforce Instances: Official Salesforce domain endpoints (e.g.
your-domain.my.salesforce.com) to execute authorized Tooling, REST, and Metadata API calls. - Static Assets: The extension bundles all icons, fonts, styles, and scripts locally inside the extension package. No remote CDN scripts are loaded at runtime.
⚖️ 6. Enterprise & Regulatory Compliance
Because SF Lens Pro operates purely client-side without storing, transmitting, or processing data on third-party servers:
- GDPR & CCPA / CPRA: SF Lens Pro does not collect or process personal data, eliminating third-party data processing risks.
- SOC 2 & Corporate Security Policies: Since no customer data leaves your local network or approved Salesforce environment, SF Lens Pro satisfies enterprise infosec policies.
- Google Chrome Web Store Limited Use: SF Lens Pro complies fully with the Chrome Web Store Limited Use requirements. We never use or transfer user data for serving personalized advertising, credit assessment, or data brokering.
🔄 7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect enhancements to our toolset or changes in regulatory guidelines. Any revisions will be published immediately to this page with an updated "Last Updated" date.
📬 8. Contact & Inquiries
If you have questions, feedback, or security concerns regarding this Privacy Policy or SF Lens Pro, please reach out to us:
- Project Repository: GitHub Profile & Issues
- Documentation Portal: SF Lens Pro Official Documentation
- Developer Support: Support SF Lens Pro Community