Security and data
Can it write to Salesforce?
No. Checks and the ChatGPT and Claude tools only read. The one time OrgPulse writes is setup, when you ask, and those three changes are listed before you agree. What setup changes
What does it keep?
- Org ids, the name you give each org, and the integration username.
- What checks found: expiring items as named in your org (which can include users' names), limits and licence counts.
- History: on Free, the latest check and today's summary and changes; on Pro, the latest check plus a daily summary and every change from the last 180 days.
- Your alert settings and alert history. Slack webhook URLs are stored encrypted.
What does it never keep?
- Salesforce passwords. It never asks for one.
- Your Salesforce sign-in. It is used for one request, then discarded.
- Record data: no accounts, contacts, opportunities or files.
- Card details. Those go to Stripe.
Your data is not sold, used for advertising, or used to train AI models.
Who handles it?
CloudCounsel Limited, a New Zealand company, runs OrgPulse on Vercel, with data in Neon Postgres. Clerk handles sign-in, Stripe billing, and Resend and Slack the alerts you turn on.
How do I delete it?
Forget an org on its Connection page to delete everything held for it at once. To delete your account, email hello@cloudcounsel.co.nz; it is gone within 30 days.The full privacy policy