Salesforce Mirror Privacy Policy

Effective date: October 2, 2026

Last updated: October 2, 2026

Salesforce Mirror works locally in your browser and communicates directly with Salesforce at your request. We do not operate a server that receives your Salesforce data, and we do not sell user data or use it for advertising.

1. About this policy

This Privacy Policy explains how the Salesforce Mirror Chrome extension (the “Extension”) accesses, uses, stores, and shares information. The Extension provides a browser-based workspace for authorized users to inspect and manage Salesforce code, metadata, records, tests, debug logs, and APIs.

2. Information the Extension handles

The Extension may handle the following categories of information when you use its features:

Identifiers: Salesforce username, display name, user ID, organization ID, organization name, and Salesforce domain.
Authentication information: Salesforce OAuth access tokens, optional refresh tokens, or a Salesforce browser-session cookie selected by the user.
Salesforce content: code, metadata, object schemas, records returned by user-initiated queries, Apex test results, code coverage, debug logs, API request and response content, and deployment or validation results.
User-provided content: local log files, pasted log text, code drafts, API request drafts, settings, and other content that you intentionally open, enter, or create in the Extension.
Connection and preference data: saved Salesforce organization profiles, interface preferences, recent-item references, and locally cached workspace information.

The Extension does not intentionally collect health information, financial or payment information, precise location, general browsing history, keystroke logs, or advertising profiles.

3. How information is used

Information is used only to provide features requested by the user, including:

authenticating with and maintaining a connection to a selected Salesforce organization;
retrieving, displaying, searching, formatting, and locally analyzing Salesforce information;
running user-requested queries, tests, validations, deployments, metadata operations, and API requests;
saving preferences, drafts, workspace state, and recent-item references on the user's device; and
diagnosing errors and showing Salesforce API results to the user.

Debug-log explanations and other built-in analysis are produced locally in the browser. Log contents are not sent to an artificial-intelligence service.

4. Authentication

The Extension can connect through Salesforce OAuth using Chrome's identity API or, when the user explicitly selects an authenticated Salesforce tab, by using that tab's Salesforce session. Authentication credentials are used only to communicate with the selected Salesforce organization.

Access tokens and browser-session credentials are kept in Chrome session storage and are cleared when the applicable browser session ends or the user disconnects. If the user enables the option to remember an OAuth connection, an OAuth refresh token may be stored in the Extension's local Chrome storage so the connection can survive a browser restart. Browser-session cookies are not persistently copied into local extension storage.

5. Local storage and retention

The Extension stores preferences, organization profiles, drafts, caches, workspace state, and limited recent-item information locally using browser-provided storage and IndexedDB. Retention depends on the applicable feature and the user's settings. Users can remove stored information through the Extension's settings and disconnect controls, by clearing the Extension's site data in Chrome, or by uninstalling the Extension.

Salesforce content that remains in the user's Salesforce organization is controlled by the user and Salesforce and is subject to the organization's own configuration and retention policies.

6. Network communications and disclosure

The production Extension has no developer-operated backend. Network requests initiated by its Salesforce features are sent directly from the user's browser to Salesforce over HTTPS. When a user deliberately uses the REST API Explorer with another endpoint, the request is sent directly to the endpoint chosen by that user.

We do not sell or rent user data. We do not transfer user data to advertising platforms, data brokers, or analytics providers. Information may be disclosed only when directed by the user through an Extension feature, when necessary to communicate with Salesforce or another endpoint explicitly selected by the user, or when required by applicable law.

7. Analytics and advertising

The Extension does not contain advertising and does not use analytics, tracking pixels, behavioral profiling, or telemetry services. Information handled by the Extension is not used for personalized advertising, creditworthiness, lending, or other unrelated purposes.

8. Data security

The Extension uses HTTPS for supported network communications, requests only the browser permissions needed for its features, and restricts extension pages to packaged executable code. Nevertheless, no method of electronic storage or transmission can be guaranteed to be completely secure. Users should connect only to Salesforce organizations and API endpoints they trust and should follow their organization's security policies.

9. User choices and deletion

Users can control or remove information handled by the Extension by:

disconnecting a Salesforce organization;
disabling remembered OAuth connections;
clearing drafts, history, caches, or other locally saved data in the Extension;
revoking the Extension's access from Salesforce; or
clearing the Extension's Chrome storage or uninstalling it.

10. Children's privacy

The Extension is a professional Salesforce development tool and is not directed to children. We do not knowingly collect personal information from children.

11. Changes to this policy

This policy may be updated when the Extension's features or data practices change. Material changes will be reflected on this page by updating the “Last updated” date. Data practices disclosed in the Chrome Web Store listing will be updated when required.

12. Chrome Web Store Limited Use

The use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Information is used only as necessary to provide or improve the Extension's prominent user-facing features and is not used for advertising or transferred for unrelated purposes.

13. Contact

For privacy questions, requests, or concerns about Salesforce Mirror, contact zariva.stores@gmail.com.