Report Sender sends reports via email, so use it with care, given how easily emails can be forwarded. This article covers the high-level information about how we keep your data safe. For detailed information about our security practices, please visit trust.cloudanswers.com.
Security Practices
Most of the application is Salesforce-native, keeping configuration and email generation within the platform, where you can monitor the app and back up your data.
We use a Heroku microservice to generate the files needed for the emails. This microservice temporarily processes your data, then deletes any files shortly after sending them back to Salesforce. All data is encrypted at rest and in transit using industry-standard encryption.
We use the reporting API, so the application needs OAuth access. This OAuth access can be revoked from any user at any time if you want them to stop sending reports and dashboards.
Private custom settings store security tokens, which only the application code can see.
Configuration options are stored in records in your org for ease of backup, validation, and monitoring.
Reports run as the user who scheduled them by default, so the user knows what data will be in the report.
The app is regularly scanned for security flaws and approved by the Salesforce security team. Read more about the security review.
Information We Gather
To support the application and our business, we collect and receive data from Salesforce. For more information about our subprocessors and how they manage the data, see our subprocessors list.
When you install the app or take certain actions on the AppExchange, Salesforce sends us your contact information and basic information about what you did (for example, installed Report Sender).
When interacting with the app, we collect some usage data. For example, when pages are viewed, when custom object records are changed, and when users interact with application pages. This data does not include any personally identifiable information.
Paid subscribers will be asked to provide their name, address, and billing information, which we will store securely and use for billing.
If you have any issues with the app and we determine we need login access to debug, we may ask you to grant us login access through the Salesforce setup menu. This allows our support agents to log in with the same permissions as the user who granted the access. Our support agents are trained to securely debug in a customer org and do not export any data or make changes unless you approve it and it's necessary for the fix.
If you have any questions or requests about your data, please use the chat bubble on the bottom right to start a conversation.