SF Org Explorer · Chrome Extension

Privacy Policy

Last updated: July 15, 2026

In short: SF Org Explorer runs entirely in your browser. It has no developer server. Your data goes to exactly two places, both at your own direction: your own Salesforce org, and — only if you choose to connect the optional AI assistant — the Anthropic API using your own API key. The developer never sees, collects, stores, or sells any of your data.

1. What the extension does

SF Org Explorer is a developer tool that opens an explorer window letting you browse, view, edit, diff, and deploy code components (Apex classes, Apex triggers, Lightning Web Components, Aura components, Visualforce pages and components, and static resources) in a Salesforce org you are already logged into. It also includes an optional AI assistant powered by the Anthropic API.

2. Information the extension accesses

• Salesforce session cookie ("sid"). Read from your browser for the Salesforce org you are already logged into, and used solely to authenticate requests to that org's Salesforce Tooling API. It is never modified and never sent anywhere other than your own Salesforce org's domain.
• Active tab URL. Read once, when you click the extension icon, to detect which Salesforce org is open and resolve its API hostname. No browsing history is read or collected.
• Code and metadata from your Salesforce org. Component names, source code, and related metadata are fetched from your org and displayed in the editor. Edits you deploy are sent back to that same org.
• Anthropic API key (optional). If you choose to connect the AI assistant, you paste your own Anthropic API key. It is stored locally on your device and sent only to api.anthropic.com to authenticate your requests.
• Chat messages and open file content (optional). When you send a message to the AI assistant, your message and the source code of the file currently open in the editor are sent to the Anthropic API to generate a response. This happens only when you actively use the assistant.

3. Where data is stored

• chrome.storage.session holds the detected Salesforce org hostname for the duration of the browser session.
• chrome.storage.local holds your Anthropic API key and model preference (only if you connect the assistant), so it stays connected across sessions. You can remove it at any time using the "Sign out" button in the assistant panel, or by uninstalling the extension.
• Source code and metadata are cached in memory only while the explorer window is open, and are discarded when it closes.

All storage is on your own device. Nothing is stored on any server operated by the developer.

4. Where data is sent

• Your own Salesforce org (*.salesforce.com, *.force.com, *.cloudforce.com, *.salesforce-setup.com) — to list, read, create, edit, and deploy components via the Salesforce Tooling API, authenticated with your existing session.
• Anthropic (api.anthropic.com) — only if you connect and use the optional AI assistant, and only the content described in section 2. Anthropic's handling of API data is governed by Anthropic's privacy policy.

The extension makes no other network requests. There are no analytics, no tracking, no advertising, and no telemetry of any kind.

5. Data selling and sharing

The developer does not collect your data, and therefore does not and cannot sell it, rent it, or share it with third parties. User data is never used for any purpose unrelated to the extension's single purpose described above.

6. Permissions explained

• cookies — to read your existing Salesforce session cookie so you don't have to log in again.
• tabs — to read the active tab's URL when you click the icon (org detection) and to open the Anthropic Console tab when you set up the assistant.
• storage — to keep the org hostname for the session and your optional API key on your device.
• Host permissions — Salesforce domains for the Tooling API, and api.anthropic.com for the optional assistant.

7. Security

All network requests use HTTPS. Your session cookie and API key are handled only in the extension's own pages and never exposed to websites. Note that any code you send to the AI assistant leaves your Salesforce environment and is processed by Anthropic; do not use the assistant with code you are not permitted to share with a third-party API under your organization's policies.

8. Children's privacy

This extension is a professional developer tool and is not directed at children under 13. It does not knowingly collect information from children.

9. Changes to this policy

If this policy changes, the updated version will be posted at this URL with a new "Last updated" date. Material changes to what data the extension accesses will also be reflected in the Chrome Web Store listing.

10. Contact

Developer: Paresh Santosh Koshti
Email: koshtiparesh03@gmail.com