Salesforce Studio Privacy Policy

Salesforce Studio is a browser extension for Chrome and Microsoft Edge, made by Veyra / Flightcoders. It lets you edit and save code in Salesforce orgs you are allowed to access. This policy explains what the extension handles and what it does not.

We do not collect your data

Salesforce Studio has no server of its own, no account and no analytics or telemetry. We never receive your code, your Salesforce data, your session or your credentials.

What the extension uses, and why

• Your Salesforce sign-in. To connect without a separate login, the extension uses the Salesforce session already in your browser for the org you choose. It sends that session only to that org's own Salesforce address, to load and save your code. It never writes the session to storage and never sends it anywhere else.
• Your org's code. The extension loads Lightning web components, Aura, Apex and Visualforce source from your org so you can edit it, and sends your changes back to the same org when you save.
• Optional OAuth sign-in. If you connect with your own Salesforce OAuth app instead, the access token Salesforce issues is kept in the browser's session storage, which is cleared when you close the browser.
• Optional AI assistant. Only if you enter an AI service address in Settings and ask a question, the open file and your question are sent to that address. You choose and control that service. Your Salesforce session is never sent to it.

What stays in your browser

• Drafts of files you edit, kept per org so a closed tab never loses work.
• Records of deployments in progress, so they can be resumed.
• Your settings: which org you chose, editor preferences, an OAuth Consumer Key and AI service address if you enter them.

This data stays on your computer in the browser's own extension storage. It is removed when you clear the extension's data or uninstall it.

Permissions

• Cookies: to use the Salesforce sign-in you already have, as described above.
• Storage: to keep your drafts and settings in your browser.
• Identity: only for the optional OAuth sign-in.
• Access to Salesforce sites: to recognise which org a Salesforce tab belongs to and to work with that org.
• Optional access to one AI address: requested only when you set up the AI assistant.

Sharing

We do not sell, share or transfer any data, because we never receive any. Salesforce processes your org's data under your agreement with Salesforce.

Changes

If this policy changes, we update this page and the date above.

Contact

Questions about privacy: see Contact or open an issue at github.com/fcopensource/salesforce-studio-releases/issues.

Salesforce Studio is not affiliated with or endorsed by Salesforce, Inc. Salesforce is a trademark of Salesforce, Inc.