This policy explains what personal information TwinStack Solutions ("TwinStack", "we", "us") collects, why we collect it, and the choices you have. It covers our website, twinstack.net, our AppExchange apps, and our consulting services.
1. Who we are
TwinStack Solutions is a Salesforce consultancy and AppExchange partner based in Dhaka, Bangladesh. You can contact us about privacy at info@twinstack.net.
When we work inside a client's Salesforce org as part of a consulting engagement, we process the data in that org only on the client's instructions, to deliver the agreed work. We access only what the engagement needs, through accounts the client creates or approves.
2. The short version
- Our AppExchange apps run inside your own Salesforce org. We do not receive, store or have access to your Salesforce records, form responses or credentials.
- When you install one of our apps, Salesforce shares basic installation information with us so we can support you.
- If you contact us or use our website, we use the details you give us to reply and to improve our services.
- We do not sell personal information.
3. Information we collect
Information you give us
When you email us, fill in a contact form, use our cost estimator, book a call or become a client, we collect the details you choose to share, such as your name, email address, phone number, organisation, job title and the content of your message.
| Where | What we collect | Why |
|---|---|---|
| Contact and enquiry forms | First and last name, email, phone number, company and your message | To reply to your enquiry and discuss your project |
| Salesforce Cost Estimator | First and last name, work email, company, city, state or province, your answers to the estimator questions and the resulting estimate | To unlock and send your full estimate and to follow up about it. The calculation and the downloadable PDF are produced in your browser |
| Website assistant chat | The messages you type into the chat | To generate a reply. Messages pass through our Cloudflare Worker to Anthropic's API. We do not store chat conversations |
| Booking a call | Whatever you enter on the Google Calendar booking page | To schedule the call. The booking page is run by Google |
| Email and WhatsApp | Your contact details and the content of your messages | To reply and keep a record of our conversation |
Information from Salesforce when you install our apps
When you install one of our AppExchange apps (Google Form Auto Sync, Smart Lookup Data Loader or Who Sees What), Salesforce provides us with standard installation information through its partner tools. This includes your Salesforce org ID, Salesforce edition, installation date and package version, and the installing user's name, email address and company. If you fill in the AppExchange contact form when installing, test-driving or watching a demo, Salesforce shares those details with us as well.
Information collected automatically on our website
When you visit twinstack.net, we and our service providers may collect technical information such as your browser type, device, approximate location (from your IP address), the pages you visit and how you arrived at our site. We use Cloudflare Web Analytics for this, which does not use cookies to track individual visitors. See section 9 for cookies.
4. What our apps do not collect
Our apps are native Salesforce managed packages. They run inside your Salesforce org, and the data they process stays under your control:
- Google Form Auto Sync sends form responses directly from your Google Form to your Salesforce org. No TwinStack server is in between, and we never see the responses. Your responses are also held by Google in your own Google account, under your agreement with Google.
- Smart Lookup Data Loader and Who Sees What work with the data already in your org. We do not receive copies of it.
- We do not store your Salesforce passwords, connection secrets or access tokens.
If you contact us for support with an app, we only see what you choose to send us, such as screenshots or error messages. Please remove personal information from anything you send unless we need it to fix the problem.
5. How we use information
- To provide, support and improve our apps and services
- To reply to your questions and support requests
- To send product updates, security notices and information about our services (you can opt out of marketing emails at any time)
- To prepare proposals and deliver consulting work you have asked for
- To understand how our website is used and make it better
- To meet legal, accounting and security obligations
6. Legal bases (for visitors in the EU, UK and similar regions)
We rely on: contract (to deliver services you've asked for), legitimate interests (to support app users, keep our services secure and tell business users about relevant products), consent (where required for marketing), and legal obligation (for record-keeping).
7. Who we share information with
We do not sell or rent personal information. We share it only with:
- Service providers that help us run our business, such as email, website hosting (Cloudflare) and analytics (Cloudflare Web Analytics), under contracts that limit how they use it
- Salesforce, which operates AppExchange and provides installation information to partners
- Authorities or advisers when required by law, or to protect our rights
- A buyer or successor if our business is reorganised or sold, under the same protections
These are the service providers we use today:
| Provider | What they do for us |
|---|---|
| Salesforce | Our CRM. Website enquiries, cost estimator requests and AppExchange leads are stored in our Salesforce org |
| Cloudflare | Website hosting, content delivery, security, web analytics and the server that relays website chat messages |
| Anthropic | Generates replies for the website assistant chat |
| Hosts our call booking page | |
| Cloudinary | Delivers images on our website, which involves standard request data such as your IP address |
| WhatsApp (Meta) | Carries messages if you contact us on WhatsApp |
| Tableau Public (Salesforce) | Hosts the interactive dashboard embedded on our Tableau page |
8. International transfers
We are based in Bangladesh, and our service providers may process information in other countries, including the United States. When we transfer personal information internationally, we take reasonable steps to make sure it stays protected in line with this policy.
9. Cookies
Our website does not use advertising or analytics cookies. Cloudflare, which delivers our site, may set essential cookies to protect it from bots and abuse, and our analytics tool, Cloudflare Web Analytics, works without cookies. You can block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site from working.
10. How long we keep information
We keep personal information only as long as we need it for the purposes above. Enquiry and lead information is kept while we are in contact with you and for a reasonable period afterwards, unless you become a client. Client and billing records are kept as long as the law requires. When information is no longer needed, we delete or anonymise it.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent. To make a request, email info@twinstack.net. We respond within 30 days. You can unsubscribe from marketing emails at any time using the link in the email.
If you are unhappy with how we have handled your information, you can also complain to your local data protection authority. California residents: we do not sell personal information or share it for cross-context behavioural advertising.
12. Security
We use reasonable technical and organisational measures to protect personal information, including access controls and encrypted connections. No method of transmission or storage is completely secure, but we work to protect your information and will tell you if a breach affects you where the law requires. Read how our apps protect your data in our Trust Center.
13. Children
Our services are for businesses and organisations. We do not knowingly collect information from children under 16.
14. Changes to this policy
We may update this policy from time to time. We'll change the date at the top, and for significant changes we'll let app users know by email.
15. Contact us
TwinStack Solutions
Dhaka, Bangladesh
Email: info@twinstack.net
Website: https://twinstack.net
Questions about how we handle data?
Read how our apps keep your data safe, or talk to us directly.
Visit the Trust CenterEmail info@twinstack.net