Privacy policy

• Email alerts: your email address, the topics, frequency and severity you selected, the time you confirmed, and a one-way hash of the IP address that submitted the form (kept only as proof of consent — the raw address is never stored).
• API keys: if you request an MCP key, the email you supply, an optional label, and a hash of the key. The key itself is never stored in readable form.
• Usage logs: which MCP tools were called, with what arguments, and timing. Rate limiting uses a hashed identifier, not a raw IP.

We do not collect names, company data, payment details, or anything about your Salesforce org. Nothing you point an AI agent at is uploaded to us: your agent reads your metadata locally and only sends us the identifiers it wants matched.

Your address is used for one purpose: sending the change alerts you asked for. Consent is the legal basis, it is double opt-in, and we never send marketing, newsletters, product promotions, or third-party offers. On days when nothing you selected changed, no email is sent.

• The subscriber list is stored in a private table that no browser or signed-in visitor can read. Only trusted server code can access it.
• Confirmation links and verification codes are random, single-use, time-limited, and stored only as salted hashes.
• Signup and code requests are rate limited per network, and every form answers the same way whether or not an address exists — so nobody can use the site to discover who is subscribed or to flood someone else's inbox.
• Data is transmitted over HTTPS and stored with an EU/US cloud database provider.

This site sets exactly one cookie: __cf_bm, placed by our hosting provider (Cloudflare) to tell human visitors from bots. It is strictly necessary for the site to work, contains no tracking identifier we use, and is exempt from consent for that reason.

Everything else is split into two categories you control:

• Necessary: the bot-protection cookie above. Always on; it cannot be turned off without breaking the site.
• Analytics: optional usage measurement. Off by default, and nothing in this category loads unless you accept it. Your choice is stored in your own browser only — never sent to us.

You can accept, reject, or change your choice at any time via Cookie preferences. If your browser sends a Global Privacy Control or Do Not Track signal, analytics stays off.

Two processors: our hosting and database platform, and the email delivery service that transmits the alerts. Both act on our instructions only. We do not sell, rent, or share personal data with anyone else, and there are no advertising or analytics trackers on this site.

Your address is kept until you cancel or delete it. Unconfirmed signups and unused verification tokens expire and are discarded. Deleting removes the address and its settings outright.

• Every email carries a one-click unsubscribe link.
• You can change what the alerts cover, cancel them, or request erasure at /subscribe/manage, verified with a code sent to your inbox.
• You may ask for a copy of the data we hold about your address, or its correction, at the contact below.

Data and deletion requests: hello@forcenotes.app. We answer within 30 days.

See also our terms and conditions. Not affiliated with or endorsed by Salesforce.