Terms of Service

1. About OrgBorg

OrgBorg is a web-based platform provided by Imbarco CRM Solutions ("we", "us", "our") that helps Salesforce administrators, developers, and consultants monitor, analyze, and manage their Salesforce organizations. By creating an account or using the service, you ("you", "your") agree to these terms.

2. Beta Service

OrgBorg is currently in beta. This means:

• Features may change, be added, or be removed without notice.
• The service may experience downtime or interruptions.
• We may reset data or make breaking changes as part of development.
• The service is provided "as-is" without warranties of any kind, express or implied.

You should not rely on OrgBorg as your sole monitoring or management tool for production-critical Salesforce environments during this beta period.

3. Your Account

You are responsible for maintaining the security of your account credentials. You agree to provide accurate information when creating your account and to keep it up to date. One person per account — sharing accounts is not permitted. We reserve the right to suspend or terminate accounts that violate these terms.

4. Salesforce Org Access

OrgBorg connects to your Salesforce organizations via OAuth 2.0. By connecting an org, you confirm that you have authorization to grant this access. We use the access to:

• Read metadata and configuration (objects, fields, Apex code, flows, etc.).
• Read organization limits and usage information.
• Read basic user information (profiles, login history) for adoption analytics.
• Run static code analysis on Apex code retrieved from your org.
• When you explicitly configure and run the Metadata Backup tool, retrieve metadata and push it as a commit to a git repository you own and have authorized (via a personal access token you supply).
• When you explicitly configure and run the Data Sync tool, query record data (including business records such as accounts, contacts, opportunities, and custom object rows) from the Salesforce objects you select and stream those records into a relational database you own and have authorized (via credentials you supply).

We do not modify your Salesforce configuration or records. Business records (accounts, contacts, opportunities, cases, or custom object rows) are only read when you have explicitly configured and initiated a Data Sync run against a destination database you own — and in that case, the records pass through OrgBorg's worker in memory and are written directly to your destination, not retained on our servers.

5. Data Handling

We store the following data on our servers:

• Your account information (name, email, company).
• OAuth tokens for your connected Salesforce orgs (encrypted).
• Metadata snapshots from your orgs (objects, fields, code, configuration).
• Analytics results generated by our tools (code analysis reports, health metrics, etc.).
• Basic user profile data from your Salesforce org (for adoption analytics).
• Encrypted credentials (git personal access tokens and database passwords) for any destinations you configure for Metadata Backup and Data Sync. These are encrypted at rest with AES-256-GCM and never returned to the client after save.
• Run history for Metadata Backup and Data Sync: timestamps, file counts, record counts, API call counts, per-object watermarks, and error summaries. This is operational metadata, not your business records.

We do not store copies of Salesforce business records (accounts, contacts, opportunities, custom object rows) on OrgBorg servers. The Data Sync tool streams records directly to a database you own; the Metadata Backup tool pushes metadata directly to a git repository you own. OrgBorg retains no copy of either after the run completes.

You can disconnect any Salesforce org at any time, which immediately revokes our access. You may request deletion of your account and all associated data by contacting us.

We use Sleekplan, a third-party feedback platform, to collect your product feedback and communicate updates. By accepting these terms, your name and email address will be shared with Sleekplan to identify you within the feedback system. You can view Sleekplan's privacy policy at sleekplan.com/privacy.

We use PostHog (EU region), a third-party product analytics platform, to understand how you use OrgBorg so we can prioritize improvements and diagnose issues. After you accept these terms, PostHog is loaded in your browser and receives your user id, email, name, page views, and session replays of your interactions with the app. Session replays mask form inputs by default, and we additionally mask UI regions that render data fetched from your Salesforce orgs (account names, contacts, opportunities, and similar record content) so they do not appear in recordings. PostHog is not loaded on marketing or pre-login pages, and we do not track you before you accept these terms. You can view PostHog's privacy policy at posthog.com/privacy.

6. Security

We take reasonable measures to protect your data, including encrypted OAuth tokens, HTTPS connections, and multi-tenant data isolation. However, no system is perfectly secure. During this beta period, we are actively hardening security and may not yet meet enterprise-grade standards.

7. Acceptable Use

You agree not to:

• Use the service to violate any laws or Salesforce's terms of service.
• Attempt to access other users' data or orgs.
• Reverse-engineer, scrape, or overload the service.
• Connect Salesforce orgs you are not authorized to manage.

8. Limitation of Liability

To the maximum extent permitted by law, Imbarco CRM Solutions shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, revenue, or profits arising from your use of OrgBorg. Our total liability for any claim is limited to the amount you paid us in the 12 months preceding the claim (which, during the free beta, is zero).

9. Changes to These Terms

We may update these terms as OrgBorg evolves. When we do, we will update the version number and effective date at the top of this page. If the changes are significant, we will notify you via email or an in-app prompt and may require you to re-accept the updated terms to continue using the service.

10. Contact

If you have questions about these terms or your data, contact us at support@imbarco.com.