KEELCADENCE | Field & Object Audit

Privacy Policy

Last updated: May 2026

Data Controller

KeelCadence LLC operates audit.keelcadence.com.
Contact: support@keelcadence.com

What We Collect

When you run an audit, we store:

  • Org ID and Instance URL — to identify which org was audited
  • Audit results — field API names, labels, data types, aggregate fill-rate counts and percentages, page layout names, and counts of profile/permission set grants. No individual record values are read or stored.
  • Stripe Checkout session ID and paid flag — to enable paid report download. No card details are stored on our servers.

What We Do Not Collect

  • Your Salesforce Session ID — held in your encrypted browser session cookie and in process memory only while the audit runs. Never written to our database, logs, or the XLSX workbook. Discarded immediately when the audit completes or fails.
  • OAuth tokens or refresh tokens (this tool does not use OAuth)
  • Individual Salesforce record values (Accounts, Contacts, Opportunities, or any business data — only aggregate counts)
  • Passwords, security tokens, or payment card data
  • Salesforce audit report contents, metadata findings, object/field/profile names, or downloaded workbook data via any analytics service

Legal Basis (GDPR)

We process your data on the basis of legitimate interest in providing the audit service you requested, and consent implied by voluntarily connecting your Salesforce org.

Data Retention

  • Session ID — discarded from memory when the audit finishes; cleared from your browser cookie when you disconnect
  • Audit results and reports — retained for up to 90 days after the audit was queued, then automatically and permanently deleted by a daily purge job
  • Org ID and Instance URL — deleted together with audit results after 90 days, or immediately on request via “Delete My Data”

International Transfers

Data is stored and processed in the United States on Replit's infrastructure. By using this service, you acknowledge this transfer.

Your Rights (GDPR)

You have the right to: access your data, correct inaccuracies, request erasure, restrict processing, data portability, and object to processing. To exercise any right, email support@keelcadence.com or use the deletion option below.

Right to Erasure

Connect your Salesforce org first to use self-service deletion, or email support@keelcadence.com to request deletion.

Analytics

KeelCadence uses Google Analytics 4 for website and product usage analytics. GA4 may set analytics cookies. GA4 is used to understand traffic, page usage, and high-level audit funnel activity. KeelCadence does not use GA4 to analyze Salesforce audit report contents, Salesforce metadata findings, downloaded workbooks, Salesforce Org IDs, Salesforce usernames, Report IDs, Stripe session IDs, or payment card data.

KeelCadence does not use advertising pixels, retargeting pixels, fingerprinting, or email marketing automation.

GA4 analytics are loaded only after you accept analytics cookies using the banner on your first visit. Declining analytics does not affect audit functionality. You can change your preference by clearing your browser’s local storage for this site.

Cookies

We use one strictly necessary session cookie (kc_session), encrypted and signed server-side, that holds your Salesforce Session ID and connection metadata for the duration of your visit — cleared when you disconnect or delete your account.

If you accept analytics, Google Analytics 4 may additionally set analytics cookies (_ga, _ga_EK6W2D5FH5) to measure aggregate website and product usage. These are not set if you decline analytics. No advertising or retargeting cookies are used.

Third-Party Services

  • Stripe — payment processing. Card data is handled by Stripe; we store only a Stripe checkout session ID and a paid/unpaid flag.
  • Google Analytics 4 — website and product usage analytics (consent-gated).
  • Google Fonts — font delivery. Your browser sends an IP address and user-agent to Google’s servers when loading fonts.
  • unpkg.com (Cloudflare CDN) — delivers the HTMX JavaScript library.
  • Replit — US-based hosting infrastructure.

Changes to This Policy

Material changes will be posted on this page with an updated date.