Privacy Policy

Salesforce TurboKit ("TurboKit", "we", "us") is a browser extension for Salesforce administrators and developers. This policy explains what data the extension and the website at turbokit.us (including this documentation site) handle, why, and what choices you have. TurboKit is not affiliated with, endorsed by, or sponsored by Salesforce, Inc.

To do its job, the extension reads and writes data within the Salesforce tabs you already have open, using your existing Salesforce session and permissions. This includes:

• Salesforce record data and the results of SOQL/REST queries you run;
• object, field, and other metadata you inspect or edit;
• files you choose to import or export (CSV, Excel, JSON) during data operations;
• your active Salesforce session information (session ID / OAuth token and instance URL) for the org(s) you are logged into, which the extension uses to authenticate API calls on your behalf.

This data is processed entirely within your browser. It is transmitted only between your device and your own Salesforce org, over Salesforce's APIs, in real time. It is never sent to TurboKit servers, is never stored by us, is never shared with any third party, and is never used for advertising or sold. We have no ability to access it.

Optional AI features (such as the AI SOQL Builder) send only the prompt you provide, plus the minimum context needed to generate a response, to our AI provider for processing. Please do not include secrets, passwords, or unnecessary personal data in AI prompts. AI prompts and responses are not used to train third-party models beyond what is needed to return your result, and usage may be subject to credit limits on the Free plan. If you do not use these features, no data is sent for AI processing.

The extension sends anonymous usage and diagnostic information to our analytics provider, Google Analytics (Google LLC), so we can measure feature adoption, prioritize improvements, and detect errors. This consists of:

• feature interaction events (for example, "query builder opened" or "export started") and the outcome (success or error);
• the extension version, and your browser type, version, language, and operating system;
• a randomly generated installation identifier that lets us count distinct installs and sessions;
• technical error details (error type and stack trace) when a feature fails.

This analytics data does not include the content of your Salesforce records, query results, metadata values, field data, file contents, credentials, or session tokens. We do not attempt to re-identify you from analytics data, and we do not combine it with any Salesforce data.

Analytics data is processed by Google Analytics (Google LLC) on our behalf and is subject to their privacy terms. See Google's Privacy Policy.

The TurboKit website (the pages you are reading now) uses Google Analytics, Vercel Analytics, and Microsoft Clarity to measure traffic and understand how the documentation is used. These tools collect standard web analytics data such as pages visited, referring site, approximate location (derived from IP and not stored by us in full), device and browser type, and interaction events. Microsoft Clarity may record anonymized session replays and heatmaps of the website. This website processing is separate from the extension and does not involve any Salesforce data.

The website may set cookies or use similar technologies for analytics and to remember preferences such as your theme (light or dark). The analytics providers listed above may also set their own cookies. You can block cookies in your browser; some analytics and preference features may then be unavailable. The extension itself does not use cookies for tracking — it only reads the Salesforce session cookies needed to authenticate your API calls.

• On your device: the extension uses the browser's local storage (chrome.storage and related browser storage) to keep your preferences, saved queries, and the installation identifier. This data stays on your device and is removed when you uninstall the extension or clear the extension's storage.
• Session tokens: Salesforce session information is held only in memory or browser storage for the duration of your use and is not retained by us.
• Salesforce org data: not retained by us at all — operations run in real time against your org.
• Analytics: aggregated analytics events are retained by our analytics provider for approximately 14 months, after which they are deleted or fully aggregated.
• Subscription records: kept for as long as needed to provide the service and to meet legal and accounting obligations.

If you upgrade to a paid plan, payment is processed by the platform you purchase through (for example, the Chrome Web Store). That platform handles your payment details; we do not receive or store full payment card numbers. We receive only the information needed to provision your subscription, such as your purchase and entitlement status.

We do not sell your data or share it for advertising. Data is disclosed only:

• to your own Salesforce org, as directed by you when you use the extension's features;
• to our analytics service provider (Google Analytics (Google LLC)), which processes anonymous analytics data on our behalf under its terms;
• to our AI provider, limited to the prompt and context you submit when you use an optional AI feature;
• to the payment platform you purchase through, limited to what is needed to provision a subscription;
• if required by law, regulation, or valid legal process, or to protect the rights, safety, and security of our users or the public.

TurboKit's use of information received from Google APIs, and any data the extension transmits, adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

The extension requests host access to Salesforce domains (such as *.salesforce.com, *.force.com, Lightning, and custom Salesforce domains) and access to browser storage and cookies for those domains. These are used solely to read your active Salesforce session and to make API calls to the org you are working in, in both Salesforce Classic and Lightning. The extension does not access your browsing on non-Salesforce sites.

• You can stop all extension data processing at any time by disabling or uninstalling the extension.
• You can clear locally stored preferences and identifiers from your browser's extension settings.
• Depending on where you live (for example, the EEA, UK, or California), you may have the right to access, correct, delete, or restrict processing of personal data, and to lodge a complaint with your data protection authority. Because the analytics data we hold is anonymous, we may be unable to link it to you; where we can, contact us at the address below and we will respond as required by applicable law.

TurboKit is a tool for Salesforce professionals and is not directed to children. We do not knowingly collect personal data from anyone under 16.

We may update this policy as the extension evolves. Material changes will be reflected by a new "Last updated" date on this page, and, where appropriate, noted in the extension's changelog.

For any privacy question or request, contact us at support@turbokit.us. You can also reach us through our Slack community or on LinkedIn.