Privacy policy

Last updated: 24 October 2026

This policy explains what personal data is processed in connection with ReleaseGuard, the Salesforce application, and this website, and what your rights are under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is Code-it Łukasz Waszkiewicz, Malinowa 8, 95-035 Ozorków, Poland, NIP PL7322144665, REGON 381440577 ("Code-it", "we"). Contact for all privacy matters: support@code-it.info.

2. The short version

• ReleaseGuard runs entirely inside your Salesforce org. It does not send your org's data to Code-it or to anyone else, and we have no access to it.
• We receive only the licence and contact details that Salesforce provides to every AppExchange publisher, and whatever you send us when you contact support.
• This website uses no cookies, no analytics and no trackers.

3. Data inside your Salesforce org

To evaluate its rules, ReleaseGuard reads configuration and usage data in your org, such as metadata, login history (application, user and API version) and API usage event logs. The results — scans, rule results and findings with evidence — are stored as records in your own org.

• Processing happens only within your org, under your Salesforce contract and the running user's permissions.
• The only network call ReleaseGuard makes is to your own org's Tooling API, at your org's own domain. No request leaves your org and no third-party service is contacted.
• Evidence never includes source IP addresses or source code snippets — only names, counts, dates, line numbers and the matched value.
• You control this data: it is retained and deleted under your org's own policies, and uninstalling the package removes it.

Because no org data reaches us, Code-it does not act as a processor of it. The only exception is when you explicitly grant us login access to your org for a support case; we then access only what the case needs, for the period you grant, and act on your instructions.

4. Licence data from Salesforce

When ReleaseGuard is installed, Salesforce provides us, through its License Management App, with details of the installing org and user: org ID, org name and edition, licence status and dates, and the installing user's name, email address, phone number and company.

• Purpose: managing trials and licences, providing support, telling you about important product updates, and meeting our legal and tax obligations.
• Legal basis: performance of the contract (Art. 6(1)(b) GDPR), our legitimate interest in managing our customer relationships (Art. 6(1)(f)) and legal obligations (Art. 6(1)(c)).
• Retention: for as long as the licence or trial is active, then as long as accounting and tax law requires (in Poland usually five years after the end of the calendar year), or until you object.

5. Purchases

Subscriptions are bought through Salesforce AppExchange. Payment details are handled by Salesforce and its payment provider; we do not receive card data. We receive the order details needed to deliver the licence and keep accounting records.

6. Support and email

When you email us, we process your name, email address and the content of your message to answer you (legal basis: Art. 6(1)(b) or (f) GDPR). We keep support correspondence for up to three years after the case is closed, unless it is needed longer for a legal claim. Please do not send passwords or customer data.

7. This website

This website is a static site hosted on GitHub Pages. It sets no cookies and loads no analytics, fonts, scripts or content from third parties. GitHub, as the host, may log technical data such as your IP address for security and operating the service; see the GitHub privacy statement.

8. Service providers and transfers

We use the following providers to run our business:

• Salesforce, Inc. — AppExchange, licence management and our business systems;
• Google — email (Google Workspace);
• GitHub, Inc. — hosting of this website.

Some of them may process data outside the European Economic Area, in particular in the United States. Such transfers rely on the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. We do not sell personal data and do not use it for advertising.

9. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. Where processing is based on legitimate interest, you may object at any time. Write to support@code-it.info; we answer within one month.

You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or with the authority in your own country.

10. Changes

We update this policy when our processing changes. The date at the top shows the latest version.