Org AssessorSalesforce org health check

Privacy Policy

Last updated: July 10, 2026

Org Assessor is a Salesforce org health assessment tool that runs entirely in your browser. It reads your current org through your existing Salesforce session, analyzes it locally, and shows you a report. Your org data and session never reach us or any third party.

How the extension handles data

Salesforce session. When you run an assessment, the extension reads your existing Salesforce session cookie (the sid cookie on your *.my.salesforce.com domain) and uses it only to call your own org's REST API, the same way the Salesforce web app already does. The session is never stored, logged, or transmitted to us or any third party.
Org data. Metadata and configuration read from your org — to produce findings, scores, the metadata inventory, and the Excel export — are processed locally in your browser and saved only on your device via chrome.storage.local, so you can view or reopen your latest report. This data is never transmitted to us or any third party, and each new run overwrites the previous result.
Active tab URL. Read only to identify which Salesforce org is open and to determine the correct API host. It is not stored or transmitted.

Data we receive

We receive no org data, session data, or browsing data from the extension.

The only information sent to us is what you voluntarily submit through the in-app feedback form — a feedback type, your message, and an optional email address — which is sent to sforg.live and used solely to review and respond to your feedback. Providing an email is optional and used only to reply to you.

Data sharing and use

We do not sell or transfer your data to third parties.
We do not use or transfer your data for advertising, creditworthiness, lending, or any purpose unrelated to the extension's single function.
We do not use analytics or tracking inside the extension.

Data retention

Assessment results remain on your device until overwritten by a new run or until you remove the extension.
Feedback you submit is retained only as long as needed to review and respond to it.

Permissions

The extension requests only what its single purpose requires: reading your Salesforce session cookie to authenticate to your own org, reading the active tab's URL to identify that org, on-device storage for your latest report, and host access to Salesforce domains (to query your org) and to sforg.live (for the optional feedback form only).

Changes to this policy

If this policy changes, we will update the date above and post the revised version at this URL.

Contact

Questions about this policy? Contact us at hello@sforg.live · sforg.live