Salesforce uses your personal data for a wide range of purposes including showing you personalized ads, prospecting you as a sales lead, running events, conducting research, and complying with legal requirements.
This analysis describes what Salesforce's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes the scope of permissible personal data processing activities under the agreement. It defines the operational categories within which Salesforce may process user information and serves as the basis for the organization's data handling practices across its service ecosystem.
Interpretive note: The specific legal bases relied upon for each processing purpose are not detailed in this summary document; the full Privacy Statement is referenced for further details, and the adequacy of those legal bases would require review of the complete document.
Salesforce may use your personal data collected through website visits, event registrations, or other interactions to identify and contact you as a potential customer, display personalized advertisements, and conduct research. These are broad processing purposes that go beyond simply running the service you interact with.
How other platforms handle this
In providing the services, Adyen will process personal data in accordance with its Privacy Policy and applicable data protection laws, including the General Data Protection Regulation. You are responsible for ensuring that you have the necessary consents and legal bases to share personal data with A...
We process many types of data to support business decisioning, including data about people, businesses, organizations, places, economic activity, sustainability, legal, and other significant business events, and third-party risks. Some of the data we process is considered personal data. Some of the ...
When you use Siri, Apple collects data such as your voice input, contacts, and other information to fulfill your request. If you opt in to help improve Siri, a small portion of audio recordings may be analyzed by Apple employees and contractors who are subject to confidentiality requirements. You ca...
Monitoring
Salesforce has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We collect and process Personal Data for a variety of purposes, including but not limited to the following: to provide our websites (including our social media pages); to display personalized advertisements and content; to manage event registrations, attendance, and participation in webinars, contests or promotions; to ensure the safety and security of our offices, premises, employees and events; to send marketing communications; to handle support or service-related requests; to prospect sales leads; to develop and optimize the performance of our services; to manage and document our customer and user accounts; to administer surveys and conduct research; and to comply with our legal obligations and defend Salesforce.— Excerpt from Salesforce's Salesforce Privacy Statement
REGULATORY LANDSCAPE: Each processing purpose requires a distinct legal basis under GDPR. Marketing communications and personalized advertising typically rely on consent or legitimate interests, both of which require specific analysis. Sales prospecting using personal data engages GDPR's legitimate interests test and may also trigger direct marketing rules under the EU's ePrivacy Directive (the 'Cookie Law'). The statement commits to obtaining prior consent where legally required, but does not specify which purposes rely on which legal bases in this summary document. GOVERNANCE EXPOSURE: Medium. The breadth of stated purposes is commercially typical for a company of Salesforce's scale, but each purpose requires documented legal basis analysis under GDPR. The sales prospecting purpose in particular may face legitimate interests challenges from individuals who did not directly provide their data to Salesforce but whose data was obtained from third-party sources. JURISDICTION FLAGS: EU and UK users have the strongest rights to object to processing for direct marketing purposes under GDPR, which must be honored absolutely. California residents have the right to opt out of the sale or sharing of their data used for marketing or advertising. Other jurisdictions with opt-out based marketing regimes (Canada's CASL, Australia's Spam Act) may also be relevant depending on user location. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers whose employee or contact data may appear in Salesforce's own marketing database (e.g., through conference registrations or website form submissions) should be aware that this data may be subject to Salesforce's sales prospecting practices independent of the enterprise customer relationship. COMPLIANCE CONSIDERATIONS: Legal teams should review the full Privacy Statement to identify the specific legal bases relied upon for each processing purpose listed here. Consent mechanisms for marketing communications should be audited to confirm they meet applicable standards. Data minimization reviews should assess whether all eleven listed purposes require the same categories of personal data.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This clause establishes the scope of permissible personal data processing activities under the agreement. It defines the operational categories within which Salesforce may process user information and serves as the basis for the organization's data handling practices across its service ecosystem.
Salesforce may use your personal data collected through website visits, event registrations, or other interactions to identify and contact you as a potential customer, display personalized advertisements, and conduct research. These are broad processing purposes that go beyond simply running the service you interact with.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Salesforce.