Impulsum Force360 Privacy Policy

Impulsum Force360 is a macOS desktop app for Salesforce professionals who manage Salesforce organizations from a local desktop workspace. Force360 is bought directly from Impulsum and uses Salesforce-hosted OAuth for organization authorization.

Impulsum Force360 may store local app data needed to operate the desktop workspace, including connected organization names, usernames, Salesforce org IDs, instance URLs, API version preferences, query history, snippets, and local app settings.

When you connect a Salesforce organization, authentication happens on Salesforce-hosted login and consent pages. Impulsum Force360 does not ask you to enter Salesforce credentials directly into the app. By default, OAuth uses Salesforce PlatformCLI for broad org compatibility. Enterprise teams may configure a custom Connected App client ID when their Salesforce admin policy requires it.

On macOS, newly written Salesforce access token and refresh token values are protected with macOS Keychain. The local SQLite database stores app records and token references instead of newly written raw token values. Legacy local obfuscation support may remain only so existing local data can be read during migration.

Impulsum Force360 is designed as a local desktop productivity app. Salesforce org metadata and workflow data are used to power local features such as org management, SOQL exploration, schema inspection, debug logs, and permissions.

Force360 is a one-time purchase tied to an Impulsum account. To activate a Mac, the app contacts the Impulsum licence service with your account sign-in, and Impulsum records which Macs are activated (up to two), including when each was first and last seen. You can sign a Mac out from your Impulsum account at any time.

Impulsum Force360 uses Salesforce APIs only for workflows you initiate after connecting an org. The app does not sell Salesforce data. Any future external service integration should be documented in this policy before release.

You can remove connected organizations from the app. Removing an organization should remove local org records and associated protected token material. You can also revoke Salesforce OAuth access from Salesforce setup or connected app usage controls.