Privacy Policy
Last updated: September 30, 2026
This policy explains what the Bulk Actions for Salesforce browser extension and this website (“we”, “the extension”) collect, and what we do with it. In short: your Salesforce data stays between your browser and your Salesforce org.
1. Salesforce data
The extension connects to your own Salesforce org using OAuth 2.0 with PKCE. All requests (reading report lists, copying, moving, deleting and searching reports) go directly from your browser to Salesforce. We do not operate a server that receives, stores or processes your Salesforce data.
- Access and refresh tokens are stored encrypted (AES-GCM) in your browser’s extension storage and are never sent to us.
- We never see your Salesforce password. You sign in on Salesforce’s own login page.
- Backup files created before a delete contain report metadata (names, folders, columns, filters) and are saved only to your computer’s Downloads folder.
- Operation history (e.g. “Copied 3 reports”) is kept locally in your browser to show recent activity and count free-plan usage.
2. License and payments
Purchases are processed by Lemon Squeezy, our reseller and Merchant of Record. Lemon Squeezy collects your name, email, billing address and payment details under its own privacy policy; we never receive your card details.
To check a Pro license, the extension sends Lemon Squeezy’s license API: your license key and an activation name made of your Salesforce org name and org ID. This lets you see and manage which browsers use your license.
3. What we do not collect
No analytics or tracking scripts run in the extension. We do not sell or share personal data, and we do not use it for advertising.
4. Permissions the extension requests
| Permission | Why |
|---|---|
| Salesforce domains | Show the bulk-action tools on Salesforce pages and call the Salesforce REST API. |
| identity | Run the Salesforce OAuth sign-in window. |
| storage | Save settings, encrypted tokens and local history. |
| downloads | Save the backup file before a delete. |
| alarms | Refresh your Salesforce session and license status in the background. |
| scripting, activeTab | Open the tools on the current Salesforce tab when you click the toolbar icon. |
| api.lemonsqueezy.com | Activate and validate a Pro license key. |
5. Your choices
Click “Disconnect” in the extension to revoke its Salesforce token, or remove the extension to delete all locally stored data. To ask about purchase records, contact us at the address below.
6. Contact
Questions about this policy: sfbulkactions@gmail.com.