Legal

How we protect our Customer’s data as a Processor

Our cloud services are designed to help customers comply with privacy laws around the world. Discover more about our commitment to protecting customer data as a processor.

Global Privacy Resources for Salesforce Products

Data Processing Addendum

Data Processing Addendum FAQ

Data Transfer Mechanisms FAQ

Salesforce's Notice of Data Privacy Framework Certification

Trust and Compliance Documentation

Salesforce's Notice of APEC CBPR and PRP Certifications

Salesforce's EU Processor Binding Corporate Rules

Salesforce's UK Processor Binding Corporate Rules

Salesforce Group Affiliates for UK Binding Corporate Rules for Processors

How we protect data as a Controller

We continuously monitor the global privacy landscape and adapt our privacy program accordingly. Discover more about our commitment to compliance with global privacy laws as a controller

Salesforce Candidate Privacy Statement

Salesforce Apps, Add-ins and Extensions Privacy Statement

Privacy Statement (Bahasa Indonesia)

Salesforce Data Privacy Framework Covered U.S. Entities

South Africa PAIA Manual

Transparency Reports

Information about Salesforce's principles for handling government requests for customer data and the relevant annual figures regarding such requests.

Salesforce's Transparency Report (H2 2025)

Salesforce's Transparency Report (H1 2025)

Salesforce's Transparency Report (2024)

Salesforce's Transparency Report (2023)

Salesforce's Transparency Report (2022)

Salesforce's Transparency Report (2021)

Salesforce's Transparency Report (2020-2021)

Contact Information

To exercise your rights relating to your personal data, or if you have questions regarding our privacy practices, please fill out this form, or email us at privacy@salesforce.com.

HDS 2.0 FAQ

HDS 2.0 FAQ

Important Information

Salesforce’s full Privacy Statement contains more information about Salesforce’s privacy practices.

Responsible Salesforce Entity

Salesforce, Inc. and/or its affiliated entities (“Salesforce, “we”, “us”, or the “Company”) act as the controllers of your Personal Data and are responsible for its processing, unless expressly specified otherwise in our full Privacy Statement. For the avoidance of doubt, our Privacy Statement does not apply to the extent we process Personal Data in the role of a processor on behalf of our customers. A list of Salesforce’s affiliates can be found in the List of Subsidiaries section of Salesforce’s most recent Form 10-K, available under the SEC Filings tab by selecting the “Annual Filings” filter on the page located here.

Purposes for which we process Personal Data

We collect and process Personal Data for a variety of purposes, including but not limited to the following:

• to provide our websites (including our social media pages);
• to display personalized advertisements and content;
• to manage event registrations, attendance, and participation in webinars, contests or promotions;
• to ensure the safety and security of our offices, premises, employees and events;
• to send marketing communications;
• to handle support or service-related requests;
• to prospect sales leads;
• to develop and optimize the performance of our services;
• to manage and document our customer and user accounts;
• to administer surveys and conduct research; and
• to comply with our legal obligations and defend Salesforce.

For the entire list of purposes for which we Process your Personal Data, please see the full Privacy Statement.

Who do we share Personal Data with

We may share Personal Data with various parties, including:

• service providers;
• Salesforce affiliates;
• event sponsors;
• partners;
• customers with whom you are affiliated and/or the applicable partner responsible for access to your services;
• contest and promotion sponsors;
• third-party networks and websites;
• Salesforce-affiliated App Exchange partners;
• professional advisors;
• third parties involved in a corporate transaction;
• third party accounts (in relation to Tableau); and
• public authorities.

International transfers of Personal Data

Your Personal Data may be transferred to, and stored by us, in the United States and by our affiliates and third parties (as disclosed in the full Privacy Statement) as listed in the Privacy Statement. Therefore, your Personal Data may be processed and stored outside your country or jurisdiction, including in places that may not provide the same level of protection. As described in the "International transfers of Personal Data" section of our full Privacy Statement, we have implemented safeguards to ensure an adequate level of protection where your Personal Data is transferred, including, where required, standard contractual clauses or an alternative mechanism for the transfer of Personal Data as approved by the European Commission. Salesforce also commits to comply with the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework, and the UK Extension to the EU-U.S. Data Privacy Framework(collectively, the “DPF”) and certifies its adherence to the DPF Principles as set forth by the U.S. Department of Commerce.

Your rights relating to Personal Data

You have certain rights relating to your Personal Data, subject to local data protection laws. Depending on the applicable laws, these rights may include the right to:

• Access your Personal Data held by us;
• Know more about how we process your Personal Data;
• Rectify inaccurate Personal Data and, taking into account the purpose of processing the Personal Data, ensure it is complete;
• Erase or delete your Personal Data;
• Restrict our processing of your Personal Data;
• Transfer your Personal Data to another controller (data portability), to the extent possible;
• Object to any processing of your Personal Data;
• Opt out of certain disclosures of your Personal Data to third parties;
• Know what categories of Personal Data are shared for delivering advertisements on non-Salesforce websites, applications, and services and the categories of recipients of such Personal Data;
• Opt out of the sharing of your Personal Data for delivering advertisements on non-Salesforce websites, applications, and services;
• If you’re under the age of 16, or such other applicable age of consent for privacy purposes in relevant individual jurisdictions, opt in to certain disclosures of your Personal Data to third parties;
• Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects (“automated decision-making”);
• Withdraw your consent at any time (to the extent we rely on consent as our legal basis for processing it);
• Complain about the use of your Personal Data;
• Not be discriminated against for exercising your rights as described above; and
• Appeal our refusal to act upon your request to exercise a right relating to your Personal Data by following the steps provided in response to your inquiry.

Contacting us

To exercise your rights relating to your Personal Data, or if you have questions regarding our privacy practices, please fill out this form, email us at privacy@salesforce.com, call us at tel:1-800-931-7365 or write to us at:

Salesforce Data Protection Officer (Salesforce Privacy Team) (and in India, a Grievance Officer)

415 Mission St., 3rd Floor

San Francisco, CA 94105, USA

When you contact us, please indicate in which country and/or state you reside.

If you believe that we have not been able to assist with your complaint or concern, and you are located in the EEA or the UK, you have the right to lodge a complaint with the competent supervisory authority. If you work or reside in a country that is a member of the European Union or that is in the EEA, you may find the contact details for your appropriate data protection authority on the following website.

| Situations | Categories of Personal Data | | If you express an interest in obtaining additional information about our services; request customer support (including accessing the Help & Training Portal); use our “Contact Us” or similar features; register to use our websites or to receive communications; sign up for an event, webinar or contest; participate in a program, training, certification or survey; use our services; download certain content; or are employed by a customer using our services where your information has been shared with us | Contact information, such as your name, job title, company name, address, phone number, email address, username and password, other information you have voluntarily chosen to share or communicate to Salesforce | | If you make purchases via our websites or register for an event or webinar | Contact information, financial and billing information, such as billing name and address, credit card number or bank account information | | If you attend an event | Attendee badge information which may include name, title, company name, address, country, phone number and email address, image and video, such as from CCTV footage
If you give your explicit consent and only for specified events, your biometric information, such as an image of your facial features for identification purposes
To the extent that national or local laws require it, this may also include health status, including your temperature, COVID-19-related symptoms, exposure to COVID-19 positive individuals, vaccination status, testing results, and recent travel history | | If you register with us for purposes such as, joining a community that we host or participating in a program, training or certification | Username, photo, video (such as during an online certification exam) or other biographical information, such as your occupation, location, social media profiles or usernames, company name, areas of expertise and interests | | If you interact with our websites or emails | Information about your device and your usage of our websites or emails (such as Internet Protocol (IP) addresses or other identifiers), which may qualify as Personal Data (please see Section 4 below) using cookies, web beacons, or similar technologies | | If you use and interact with our services | Information about your device and your usage of our services through log files and other technologies, some of which may qualify as Personal Data (including Usage Data) (please see Section 4 below) | | If you communicate with us via a phone call | Information such as your name, voice, telephone number and any other Personal Data voluntarily shared | | If you visit our offices or other premises | Name, email address, phone number, company name, time and date of arrival, image or video, such as from CCTV footage
To the extent that national or local laws require it, this may also include health status, including your temperature, COVID-19-related symptoms, exposure to COVID-19 positive individuals, vaccination status, testing results, and recent travel history | | If you voluntarily submit certain information to us, such as filling out a survey, responding to a questionnaire or participating in other forms of research | Information you have provided as part of that request, which may include Personal Data and special categories of Personal Data, to the extent you voluntarily choose to provide it | | If you are a supplier or service provider to Salesforce (or work for a supplier or service provider) | Contact information, payment and billing information |

If you provide us, our service providers or our affiliates with any Personal Data relating to other individuals, you:

• represent that you have the authority to do so,

• where required, have obtained their necessary consent(s) to share their Personal Data with us for processing, and

• acknowledge and accept that it may be used in accordance with this Privacy Statement.

Cookie Policy

| Type of Cookies | Description | Managing Settings | | Required cookies | Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, aggregate site analytics cookies, authentication cookies, and security cookies.
If you have chosen to identify yourself to us, we may place on your browser a cookie that allows us to uniquely identify you when you are logged into the websites and to process your online transactions and requests. | Because required cookies are essential to operate the websites, there is no option to opt out of these cookies. | | Functional cookies | Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual. 
Functional cookies may also be used to improve how our websites function and to help us provide you with more relevant communications, including marketing communications. These cookies collect information about how our websites are used, including which pages are viewed most often.
We may use our own technology or third-party technology to track and analyze usage information to provide enhanced interactions and more relevant communications, and to track the performance of our advertisements.
Salesforce may also use HTML5 local storage or Flash cookies for the above-mentioned purposes. | We need your prior consent to use functional cookies. To change your cookie settings and preferences, including those for functional cookies, click the Cookie Preferences link in the footer of the page.
To learn how to control functional cookies via your individual browser settings, click her e.
To learn how to manage privacy and storage settings for Flash cookies, click here. | | Advertising cookies | Advertising cookies track activity across websites in order to understand a viewer’s interests and to direct marketing to them. 
We sometimes use cookies delivered by us or by third parties to show you ads for our services that we think may interest you on devices you use and to track the performance of our advertisements. For example, these cookies collect information such as which browser you used when visiting our websites.
Salesforce also contracts with third-party advertising networks that collect IP addresses and other information from web beacons on our websites, from emails and on third-party websites. Advertising networks follow your online activities over time and across different websites or other online services by collecting certain data through automated means, including through the use of cookies. These technologies may recognize you across the different devices you use. When we work with third party advertising networks, we require them to restrict their data processing to only what is necessary to provide us with the advertising services we request. | We need your prior consent to use of targeting and advertising cookies. To change your cookie settings and preferences, including those for targeting and advertising cookies, click the Cookie Preferences link in the footer of the page.
See Section 4.3, below, to learn more about these and other advertising networks and your ability to opt out of collection by certain third parties.