Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document explains how Salesforce collects, uses, and shares your personal information when you interact with Salesforce directly—though it does not cover data Salesforce handles on behalf of its business customers. Salesforce may share your information with contracted vendors, event sponsors, and international affiliates, and it collects data from third-party sources for targeted advertising. You have the right to request that Salesforce delete your personal data, and Salesforce states it does not sell personal data.
This Privacy Statement establishes Salesforce, Inc. and its affiliates as data controllers responsible for Personal Data processing, while explicitly carving out data Salesforce processes as a processor or service provider on behalf of customers. It sets out the categories of Personal Data Salesforce collects—including data acquired from third-party business contact providers for tailored advertising—and the parties with whom Salesforce shares that data, including contracted service providers, event sponsors, and international affiliates and third parties. Cross-border transfers are governed by appropriate agreements, including standard contractual clauses where required, to ensure adequate protection. Individuals are recognized as holding a right to erasure, and EEA and UK individuals are acknowledged as having the right to escalate unresolved complaints to a competent supervisory authority. Salesforce expressly limits its use of artificial intelligence to contexts that are legally permissible, consistent with the Privacy Statement, and aligned with its stated commitments and values.
As an individual, your Personal Data may be collected not only directly from you but also from third-party business contact providers for tailored advertising purposes. Attending a Salesforce event, webinar, or accessing a sponsored resource may result in your Personal Data being shared with the relevant sponsors; and if you opt in to a badge scan by an event sponsor, your data goes directly to that sponsor and is governed by the sponsor's own privacy policy—not Salesforce's. Your Personal Data may be transferred to and stored in the United States, and may also be processed by affiliates and third parties outside your home jurisdiction. You have a recognized right to request erasure of your Personal Data, and if you are located in the EEA or the UK and Salesforce has not resolved your complaint, you can lodge a complaint directly with the competent supervisory authority.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
1 important change detected
3 versions captured · Last updated: May 2026
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Salesforce has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Adequate protection required for international transfers and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.