Quick Summary
- We do not store or sell your Salesforce data.
- Your Anthropic API key is stored locally on your device and never sent to our servers.
- We store only your account email, templates you create, and AI usage counts.
- We use Supabase for auth, LemonSqueezy for payments, and Anthropic for AI.
- You can delete your account and all data at any time by contacting us.
1. Who We Are
SF Booster is operated by Revelos Software, a software company. You can contact us at:
Email: support@revelos-software.com
Website: sfbooster.revelos-software.com
2. What Data We Collect
2.1 Account Information
When you create an account, we collect your email address. This is stored in our authentication provider (Supabase) and used solely to authenticate you and send transactional emails (OTP codes, billing receipts).
2.2 Templates
The query templates and AI prompts you save in SF Booster are stored in our database (Supabase) and associated with your account. This lets your templates sync across devices when you're signed in. You can export and delete your templates at any time from within the extension.
2.3 AI Usage Data
We track the number of AI chat requests you make per month to enforce plan limits. We record a count only — we do not store the content of your AI conversations on our servers.
Exception: when you use the managed AI plan (without your own API key), your prompts are sent through our Supabase Edge Function to Anthropic's API. We do not log or retain prompt content on our side, but Anthropic's own privacy policy governs data processed on their infrastructure.
2.4 Salesforce Session
The extension reads your active Salesforce session cookie to make API calls on your behalf (running SOQL queries, updating records). This session data is used only for that purpose and is never sent to our servers. It is processed entirely in your browser.
2.5 Anthropic API Key (BYOK)
If you provide your own Anthropic API key, it is stored in chrome.storage.local — a sandboxed storage area on your device that other websites or extensions cannot access. Your API key is never transmitted to or stored on our servers.
2.6 Payment Information
We do not collect or store payment card information. All billing is handled by LemonSqueezy, our payment processor. When you upgrade, you are redirected to LemonSqueezy's secure checkout. LemonSqueezy's privacy policy governs data collected during checkout.
2.7 Technical & Diagnostic Data
We may collect minimal diagnostic information such as error logs (without personal identifiers) to help us identify and fix bugs. We do not use third-party analytics trackers on this website or in the extension.
3. How We Use Your Data
- →To authenticate you and manage your account
- →To sync your templates across devices
- →To enforce monthly AI usage limits based on your plan
- →To send transactional emails (OTP codes, receipts) — we do not send marketing emails without your explicit consent
- →To process billing and manage your subscription via LemonSqueezy
- →To diagnose and fix technical issues
We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.
4. Third-Party Services
SF Booster uses the following sub-processors and third-party services:
Supabase
Authentication, database (templates, usage counts), and Edge Functions. Data is stored in the US region. Supabase is SOC 2 Type II certified.
Anthropic
AI model provider (Claude). On the managed plan, your chat prompts are forwarded to Anthropic's API. Anthropic does not train on API data by default.
LemonSqueezy
Payment processing and subscription management. We receive only subscription status and plan information — no payment card data.
Resend
Transactional email delivery (OTP codes, billing notifications). Only your email address is shared for delivery purposes.
5. Chrome Extension Permissions
SF Booster requests the following Chrome permissions and uses them as described:
storage
Stores your Anthropic API key, session preferences, and offline template cache on your local device only.
cookies
Reads your Salesforce session cookie to authenticate API calls to Salesforce on your behalf. The cookie value never leaves your browser.
activeTab / tabs
Detects whether the current tab is a Salesforce page so the sidebar can activate and read the page context (URL, object type).
scripting
Injects the SF Booster sidebar UI into Salesforce pages.
sidePanel
Opens and manages the Chrome side panel that hosts the SF Booster UI.
contextMenus
Adds a right-click menu option to open SF Booster from any Salesforce page.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will permanently delete your email, templates, and usage records within 30 days. Anonymized aggregate usage statistics (e.g., total queries run) may be retained indefinitely for product analytics purposes.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- →Access: Request a copy of the personal data we hold about you.
- →Correction: Ask us to correct inaccurate data.
- →Deletion: Request deletion of your account and all associated data.
- →Portability: Export your templates at any time using the Export feature in the extension.
- →Opt-out: Uninstall the extension at any time — this removes all locally-stored data automatically.
To exercise any of these rights, email us at support@revelos-software.com. We will respond within 30 days.
8. Security
We take reasonable technical and organizational measures to protect your data, including:
- →Row-Level Security (RLS) on all database tables — you can only access your own data
- →All data in transit encrypted via TLS/HTTPS
- →API keys stored in isolated browser storage, never transmitted
- →Server-side secrets (Anthropic key, webhook secrets) stored as environment variables, never exposed to the client
No system is 100% secure. If you believe you've found a security vulnerability, please report it responsibly to support@revelos-software.com.
9. Children's Privacy
SF Booster is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we may notify you via email. Your continued use of SF Booster after changes take effect constitutes acceptance of the revised policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy, or want to exercise your data rights, please contact us: