Privacy policy
Applies to Metadata Compare, operated by Lightning Leap Consulting.
What we collect
- Your account: your email address and a hashed password (we never store the password itself), plus when you signed up and last logged in.
- Salesforce logins: when you connect an org, Salesforce gives us a login token for it. We use it only to run the comparison you started, then delete it. If a connected org isn't used, its token is deleted after one hour. Tokens are encrypted while stored.
- Org details: the username, organization ID and address of each org you connect, shown in your comparison list.
- Comparison results: to show you what differs, we store the metadata files that differ between your two orgs (for example Apex classes, flows, object definitions), the differences between them, and summary counts. We don't read or retrieve your Salesforce records (accounts, contacts, cases and so on), only metadata.
- Technical data: your IP address is used briefly to limit repeated login and sign-up attempts. Standard server logs may record requests.
How we use it
Only to provide the service: run your comparisons, show you the results, send account emails (confirmation and password reset), and keep the service secure and working. We don't sell your data, use it for advertising, or look at your comparison results. Administrators can see usage counts (number of accounts and comparisons), not results.
Hidden credentials
Metadata can contain credentials, such as OAuth consumer secrets in connected apps or secrets in named credentials. We replace these values with "REDACTED" wherever results are shown or downloaded.
How long we keep it
- Salesforce login tokens: until the comparison ends, or one hour if unused.
- Comparison results: 7 days, or until you delete them, whichever comes first.
- Your account: until you delete it. Deleting your account removes it and all comparisons immediately.
Where it's stored
On the server that runs this service. Data travels over encrypted (HTTPS) connections. Account emails are sent through an email delivery provider.
Your choices
You can delete any comparison or your whole account at any time from the app. You can also revoke this service's access from Salesforce under Setup → Connected Apps OAuth Usage, or your user's OAuth connections.
Contact
Questions or requests: [email protected].