How we handle Salesforce exports you send for a Salesforce Export Check
This section applies when you buy Salesforce Export Check ($19) and email us Contact and Account exports.
What we receive. You email us Salesforce Data Loader or report exports as attachments (CSV or Excel), up to 25,000 rows per file, for Contact and Account. You may also send a before (source) export. Those files often contain personal information about your contacts and accounts — for example names, business emails, phone numbers, account names, and Salesforce identifiers — that you already hold. We also receive your payer email and the checkout notes you typed (which files you are sending, optional External ID column, and Salesforce objects) from Stripe.
What we do not want. Do not send passwords, security tokens, or org logins. Do not send exports that include social security numbers, government ID numbers, health information, financial account or card numbers, or login credentials. If your export contains columns you do not need for the check, remove them before you send the file.
Please redact before you send. The check looks at relationship and quality fields (for example Account lookup or Account Name, Id, External ID, LastName, Email). You can usually remove columns we do not need, including:
- mobile or personal phone numbers you do not want us to see
- personal (non-work) email addresses, if the check does not need Email
- free-text Notes, Description, or comment fields
- mailing street addresses, if the check does not need them
- any column that holds a government ID, date of birth, health note, or payment-card or bank-account number
If you are unsure, send the smallest set of columns that still lets us run the checks described on your receipt.
Our role, in plain words. You are asking us to review your files and send you a findings workbook. We use the files only to do that job. We do not become the owner of your contacts’ information. In California privacy language, when a business customer sends us this kind of file, we handle it as a service provider / processor: we process it on your instructions to deliver the check, we do not sell it, we do not use it for our own marketing, and we do not combine it with other customers’ files to build a new product. If you are not yourself a business covered by CCPA, we still treat the file the same way.
You represent that you have a lawful basis to send us any personal information about other people that appears in your files.
If a file includes columns we asked you not to send (for example a government ID, health note, or payment-card number), we will not use those columns for the check and we will delete the file or ask you for a redacted copy.
Who can see the files. Access is limited to the people preparing and sending your findings. Fulfilment instructions say the files are downloaded to a working folder for your order on our work computer, and are not copied to our routine Drive backups.
Tools we use. We use software tools, including automated tools (for example spreadsheet software and our own checking scripts or workbooks), to read the files and produce counts and flagged rows. A person reviews the outbound findings email before it is sent. We do not use your files to train general-purpose models.
Who else may see the files because you sent them.
- Google (Gmail) — you send the attachments to madebyailstudio@gmail.com, and we send the findings from that account.
- Stripe — already has your payment record; we do not upload your export to Stripe.
- We do not share the files with anyone else except as required by law.
We delete our working copies of your files within 7 days after we send the findings (or within 7 days after a refund if we never delivered). Copies on Gmail or other third-party systems may remain; we cannot fully erase those. We do not copy buyer export files to our routine Drive backups. Stripe keeps the payment record.
Deletion on request. Email madebyailstudio@gmail.com and ask us to delete your files. We will delete our working copies when we have matched the request to your order, even if the 7 days have not passed.
No other use. We will not use your export files to market to your contacts, to resell a list, to train general-purpose models, or for any purpose other than delivering (or refunding) your check and complying with law.
If something goes wrong. If we discover unauthorized access to or acquisition of your export files, we will notify you promptly and will follow applicable breach-notification law (including California Civil Code § 1798.82 and New York’s SHIELD Act, as described in our Privacy Policy).