Privacy Policy

This Privacy Policy describes how PurposeForce ("we," "us," or "our") collects, uses, and protects information in connection with the Rewind Reels for Salesforce service ("Service"), which includes our Salesforce AppExchange managed package and associated backend infrastructure.

1. Information We Collect

1.1 Salesforce CRM Data

When you use Rewind Reels, our Service queries your Salesforce org at render time to retrieve CRM data necessary for generating video summaries. This data may include object records, field values, and metadata from your Salesforce org as configured in your Rewind Config settings. Salesforce data is processed in real time and is not permanently stored on Rewind servers.

1.2 Account and Contact Information

• Email addresses provided for video completion notifications and digest emails
• Salesforce Org ID (used to identify your license and authenticate API requests)
• API keys generated for your Salesforce org

1.3 Billing Information

Payment processing is handled entirely by Stripe, Inc. We do not store credit card numbers, bank account details, or other payment instrument data on our servers. Stripe may collect and store your payment information in accordance with their privacy policy and PCI DSS compliance standards.

1.4 Usage Data

• Number of videos generated per month (render count)
• Video watch time and completion rates (for analytics features)
• Error logs and rendering status information

1.5 Cookies

Our Service uses minimal cookies limited to session management for the video player and documentation sites. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

2. How We Use Your Information

• Video Generation: CRM data is queried and sent to our AI narration service (Anthropic Claude) to generate narration scripts and visual themes. The resulting data is stored on your Salesforce record.
• Video Delivery: Videos are rendered as animated HTML presentations in the viewer's browser. No video files are stored on external servers.
• Billing: To process payments and manage your subscription tier.
• Notifications: To send email notifications when videos are complete or as part of scheduled digest emails.
• Support: To respond to your inquiries and provide technical support.
• Service Improvement: Aggregated, anonymized usage statistics may be used to improve the Service.

3. Data Retention

4. Third-Party Data Processors

We use the following third-party services to operate Rewind Reels:

5. Data Security

• All data in transit is encrypted using TLS 1.2 or higher
• Video data stored in Salesforce is protected by Salesforce platform encryption
• API authentication via per-org API keys with HMAC token verification
• Rate limiting applied to all API endpoints (30 requests per minute per API key)
• Salesforce permission sets (Admin, User, Viewer) control data access within your org
• CRUD and FLS enforcement via Security.stripInaccessible in all Apex code

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at hello@purposeforce.org. We will respond within 30 days of receiving your request.

7. GDPR Compliance

For users in the European Economic Area (EEA), United Kingdom, and Switzerland:

• Legal Basis: We process personal data based on (a) your consent, (b) the necessity to perform our contract with you, (c) our legitimate interests in operating and improving the Service, or (d) compliance with legal obligations.
• Data Transfers: Your data is processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for data transferred outside the EEA.
• Data Protection Officer: For GDPR-related inquiries, contact hello@purposeforce.org.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

8. CCPA Compliance

For California residents, as defined by the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt Out: We do not sell or share personal information for cross-context behavioral advertising.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your CCPA rights, contact us at hello@purposeforce.org.

9. Children's Privacy

Rewind Reels is a business-to-business service and is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at hello@purposeforce.org.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" above. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

PurposeForce
Email: hello@purposeforce.org
Web: purposeforce.org