Privacy Policy

1. Scope

This policy covers factalize.com and the Factalize application. Factalize is an independent product and is not affiliated with, sponsored by, or endorsed by Salesforce, Inc.

2. Information we collect

• Account information — name, email, and organization, collected when you sign up.
• Salesforce org data— connected via Salesforce's own read-only OAuth flow. We store the structural findings needed to build your report (configuration, metadata, and usage patterns), not your underlying business records or customer data. Passwords are never shared with us.
• Payment information— handled directly by Stripe at checkout. We don't receive or store your card details.
• Demo-link visits— if you view a sample report through a tracked link sent to you, we log the company name associated with that link and the visit timestamp/count. This isn't visitor-submitted personal information.
• Cookies & analytics— used to understand site usage, only after you've made a choice through our cookie consent banner. See §5.

3. How we use this information

To generate your assessment report, operate your account, process payments, respond to support requests, and — only with your consent — understand aggregate site usage to improve Factalize. We don't sell your data, and we don't use your assessment data to train any AI model ourselves.

4. Who we share data with

We use a small number of subprocessors to run Factalize, each limited to what they need to do their specific job:

• Stripe — payment processing for paid tiers.
• Resend — transactional email (account, report-ready, and billing notifications).
• Anthropic (Claude)— only if you purchase AI Findings, relevant assessment data (specific CSVs, not your full org export) is sent to Anthropic to generate that analysis. Anthropic is contractually prohibited from training its models on this data, retains it only for the term of our agreement, and deletes it within 30 days of termination. Anthropic's current subprocessor list is public at anthropic.com/subprocessors.
• Cookiebot — manages cookie consent and, once enabled, our analytics provider — see §5.

We don't sell your data to anyone, for any reason.

5. Cookies

We use Cookiebot to manage cookie consent. Strictly necessary cookies (for login sessions) run automatically; analytics cookies only run after you accept them through the consent banner, and you can change your choice at any time using the preferences link the banner provides.

6. Data retention & deletion

Your report data can be deleted at any time — contact us and disconnect your org, and we'll remove it. Salesforce access is read-only and revocable at any time from your own Salesforce Setup, independent of us.

7. Your rights

You can request access to, correction of, or deletion of your personal information, and manage cookie preferences at any time, by contacting us.

8. Children's privacy

Factalize is a business tool and isn't directed at, or knowingly used by, children.

9. International data transfers

Factalize is based in the United States, and the information we collect is stored and processed in the United States. If you're located outside the United States, you understand that your information will be transferred to, stored, and processed here.

10. Changes to this policy

We may update this policy as Factalize evolves. Material changes will be reflected by the "Last updated" date above.

Questions

Have a specific privacy question not covered here? Contact us directly.