EagleDesk for Chrome - Privacy Policy

1. Who is responsible

Cloudeation Technologies LLC, 116 Village Blvd, Suite #200, Princeton, NJ 08540, USA ("Cloudeation") publishes EagleDesk for Chrome. This policy covers the browser extension only. The EagleDesk desktop app and website are covered by the EagleDesk Privacy Policy.

2. What the extension uses, and why

• Your Salesforce session. The extension reads the Salesforce session cookie of orgs you are logged in to in Chrome and uses it to call that org's Salesforce APIs for you. The session is used only in requests to the same Salesforce org. It is never sent to Cloudeation or anyone else, and it is never stored by the extension.
• Salesforce data you look at. Records, metadata, code, users, debug logs and query results are fetched from Salesforce when you ask for them and shown in the extension. They are processed in your browser only.
• The Salesforce page you are on. On Salesforce pages, the extension notes which record or Setup page is open, so the side panel can show it. If you turn on "Show field API names", it also reads the field markers Lightning puts on record pages to label each field with its API name. It does not read or change the content of other websites.
• Records you import. When you use the Data Loader, the rows of the CSV file you choose are sent to your own Salesforce org - only orgs you have allowed data changes for. Before an update, the current values of the affected records are saved in your browser as a backup, so you can put them back. Nothing is sent anywhere else.
• Screenshots. When you click the capture button, the extension takes a picture of the current Salesforce page and saves it to your Downloads folder and clipboard. Nothing is uploaded.
• Feedback you send. 💬 Feedback lets you send the EagleDesk team a message, optionally with up to 3 screenshots you add yourself. Nothing is sent until you press Send, and only what the form shows you: your text, the screenshots, the extension version, your operating system and Chrome version, the EagleDesk screen you came from, and a random code that groups this browser's tickets (it doesn't identify you). No Salesforce data, org names or session information is added. It goes to EagleDesk's feedback service (run on Cloudflare), which files it as a ticket in a private GitHub repository that only the EagleDesk team can see. Each ticket has a random key kept in your browser, so only your browser can see its status and our replies. Please don't put client data in feedback or screenshots. To have a ticket deleted, email support@eagledesk.app with its number.

3. What is stored, and where

My Orgs (the orgs you save or that EagleDesk remembers: name, group, login address, username and start page), settings (such as org names and which orgs allow data changes or are blocked), query history, saved queries, REST Explorer history, notes and Data Loader backups and results are stored in your Chrome profile (extension storage and IndexedDB). They never leave your browser unless you export them yourself. You can delete them in EagleDesk › Settings › Data, or by removing the extension.

Saved passwords (optional)

You can save a password with an org in My Orgs, so EagleDesk can log you in with one click. Saved passwords stay on your computer, encrypted with AES-256 using a key that is also kept on your computer. This keeps them out of plain sight; like any password saved in a browser, anyone with full access to your computer could read them. A saved password is only ever filled into the Salesforce login page of that org, in a tab you opened with "Log in" in My Orgs. Saved passwords are never sent to Cloudeation and never included in exports. "Delete saved passwords" in My Orgs removes them.

4. What the extension connects to

The Salesforce domains of your orgs (*.salesforce.com, *.force.com, *.salesforce-setup.com, *.cloudforce.com), and EagleDesk's feedback service (eagledesk-feedback.eagledesk.workers.dev) - only when you send feedback, add to a ticket or open My tickets (and, if you have sent feedback, a check for replies at most every 6 hours). Links you choose to open, such as eagledeskai.com or the AWS Marketplace, open in a normal browser tab; links to eagledeskai.com carry a tag saying they came from the extension, so we can count visits from it. The extension itself sends no data to those sites.

5. What we don't do

We do not collect any data from the extension other than feedback you choose to send, and we do not sell, rent or share it. We do not use it for advertising, profiling or credit decisions. We do not use remote code: all of the extension's code is included in the package published on the Chrome Web Store.

6. Changes and contact

If this policy changes, the new version is published on this page with a new date. Questions: support@eagledesk.app.