SFings

Privacy policy

DeployWizard Privacy Policy

Last updated: July 11, 2026 · Applies to the DeployWizard Chrome extension.

DeployWizard is a Chrome extension published by SFings that deploys Salesforce metadata between Salesforce orgs from a browser side panel. This policy explains what data the extension handles, where it goes, and what it does not do.

Data the extension handles

  • Salesforce authentication tokens. When you connect a Salesforce org, the extension obtains OAuth access and refresh tokens through Salesforce's standard login flow. These tokens are stored locally in your browser's extension storage on your device and are transmitted only to Salesforce, to call Salesforce APIs on your behalf. They are never sent to DeployWizard's servers or any third party. DeployWizard never sees or stores your Salesforce password.
  • Chrome profile email. With your explicit consent on the first-run screen, the signed-in Chrome profile's email address is read and sent to the DeployWizard backend to identify your installation for license and quota management.
  • Deploy count. After a successful deploy, the extension notifies the DeployWizard backend so it can increment your monthly deploy count for free-plan quota enforcement. This notification carries only your install ID and Chrome profile email — no Salesforce deploy ID, metadata contents, component names, org URLs, or deploy payloads are transmitted.

Access is on your behalf

DeployWizard acts on behalf of the Salesforce user who signs in. It can only read or deploy metadata that your Salesforce account is already authorized to access. It does not grant any additional access or bypass Salesforce permissions.

What is never collected or transmitted

  • Your Salesforce metadata, code, or record data.
  • Org instance URLs or org names.
  • Deploy package contents or component names.
  • Browsing history or activity outside the extension.
  • Analytics, telemetry, or advertising identifiers.

Where data is stored

Authentication tokens, connected-org records, deploy history, and settings are stored locally in your browser's extension storage on your device. The only data leaving your device — besides API calls to Salesforce itself — is the Chrome profile email, install ID, and deploy count described above, sent to the DeployWizard backend at deploywizard-api.vercel.app solely for license and quota management.

Remote code

The extension does not execute remote code. All JavaScript is bundled into the extension package; there are no remotely loaded scripts and no runtime module fetching.

Data sharing

DeployWizard does not sell your data and does not share it with third parties for advertising or analytics. Salesforce tokens go only to Salesforce; the limited license data goes only to the DeployWizard backend.

Data retention and deletion

Locally stored data is removed when you remove a connected org or uninstall the extension. To request deletion of the license record associated with your email or install ID, contact us at the address below.

Changes to this policy

If this policy changes, the "Last updated" date above will change with it. Material changes will be noted in the extension's Chrome Web Store listing.

Contact

Questions or deletion requests: sfings.dev@gmail.com.