Security and data privacy
The following table lists the short and long-term data that our Install Service retains. Short-term data is held for only as long as is required to perform the action requested by the user. Long-term data persists in a database supporting our Install Service.
All user information, such as the Salesforce user email, is captured from Salesforce.com during the OAuth 2.0 web server flow. For more information about our Install Service authentication process, see Installation.
Data retention
| Data name | Short-term | Long-term | Notes |
|---|---|---|---|
| Access token | ✓ | Our Install Service temporarily stores an Access token during an installation operation or for 10 minutes, whichever is longer. | |
| Job logs | ✓ | Kept for 90 days. | |
| Salesforce user email | Emails are not retained. | ||
| Salesforce user ID | ✓ | Kept for 30 days. | |
| Organization ID | ✓ | Kept for 30 days. | |
| Organization type | ✓ | Sandbox or production. |