Privacy Policy

Data We Access

When a user connects Salesforce, PipelineQuest may access Salesforce data needed to power Today, Forecast, Profile, sync status, close score, and sales workflow features.

• Opportunity identifiers, names, amount, stage, forecast category, close date, next step, created date, and activity timing.
• Account or company name associated with an opportunity.
• Recent Salesforce activities and notes when needed for workflow context.
• Salesforce organization and user display names for connection status.

Apple Review Demo Mode

Apple Review Demo Mode does not access a live Salesforce org. It uses seeded sample data only and keeps Salesforce write-back disabled.

Local Data

PipelineQuest stores local app state for account session summary, Salesforce setup status, preferences, progress, completed cards, dismissed cards, and cached Salesforce data needed for continuity. In the iOS Expo wrapper, selected account and setup keys are backed by iOS Keychain through Expo SecureStore. The web fallback uses browser local storage.

Backend Storage

PipelineQuest server routes use TLS through Vercel. Backend persistence is optional during beta and uses Supabase when configured. Salesforce OAuth refresh tokens and connection secrets should not be stored unless field encryption is configured with PQ_FIELD_ENCRYPTION_KEY.

Salesforce Write-Back

Real beta accounts start in read-only mode. If write-back is enabled, PipelineQuest may update Salesforce opportunity fields such as stage, forecast category, close date, amount, next step, and activity/task records.

AI Processing

AI processing is disabled for real Salesforce context unless the user enables AI processing in Settings. When AI processing is enabled, minimized deal context may be sent to the configured AI provider through the Vercel AI Gateway. Rule-based suggestions that run locally do not send Salesforce context to an AI provider.

Diagnostics

Export Diagnostics includes app version, environment, sync status, local progress, and redacted recent errors. It excludes raw Salesforce records, activity notes, next-step text, and full write-back request bodies by default.

Account Deletion

Users can request account deletion from Settings. Account deletion clears local app data and, when backend persistence is configured, deletes the matching backend account profile, preferences, progress, demo session metadata, and workspace membership.

Contact

For privacy, support, or account deletion questions, contact support@pipelinequest.app.