What SOQL AI stores, where it stays, and what it sends to other services.
Effective 21 October 2026 · Last updated 21 October 2026
In short
SOQL AI runs on your Mac or on your organisation's own server. Your Salesforce data, queries and credentials are stored there, not with SolvixaLabs.
The app has no analytics, tracking, advertising or telemetry. SolvixaLabs doesn't receive information about how you use it.
SOQL AI talks directly to your Salesforce org. When you use the AI assistant, it sends your request, the query text, and the names and types of the objects and fields involved to OpenAI. Your records are never sent to OpenAI.
Saved Salesforce passwords and tokens are encrypted, and SOQL AI account passwords are stored only as secure hashes.
1. Who we are and what this covers
SOQL AI is made by SolvixaLabs legal entity name ("SolvixaLabs", "we", "us"). This policy covers the SOQL AI Mac app and the self-hosted web app, and the information you send us when you ask for support. The rest of the SolvixaLabs website may have its own privacy notice.
2. What SOQL AI stores
To work, SOQL AI keeps the following in its own database:
SOQL AI accounts: name, email address, role (viewer, developer or admin), and a hash of the password (never the password itself).
Salesforce connections: the label, environment, login and instance URLs, Salesforce username, user and org IDs, and the access and refresh tokens. If you choose to remember it, the Salesforce password too. Passwords and tokens are encrypted.
Query history: the text of each query you run, any plain-English request used to generate it, the object queried, row count, timing and any error message. Query text can include values you typed into filters.
Your work: projects, folders, saved queries and their versions, tags, and settings such as theme and editor preferences.
Edit history: for each inline edit, the record Id, the object, and the field values before and after the change, so you can see and undo it.
Data operation and Apex logs: the operation, object, counts of records sent, succeeded and failed, the first 50 errors (row number, record Id, message), and up to 4,000 characters of any Apex you ran.
AI usage: the type of request, token counts, model, duration and whether it worked. The text of requests isn't stored here; generated queries appear in query history.
Temporary caches: query results (5 minutes by default) and descriptions of your Salesforce objects (30 minutes), so repeated work is faster. They're kept separate for each Salesforce connection.
On the device itself: the app stores your sign-in session, the list of recent SOQL AI accounts, preferences, open query tabs, query variable values, compare drafts and recently inspected records in local storage.
Technical logs: errors and events such as sign-ins, connection changes and data jobs, with user IDs and object names. Logs are designed not to contain passwords, tokens or record data.
SOQL AI doesn't keep copies of your Salesforce records beyond the short-lived caches, the before-and-after values of your own edits, and files you choose to export.
3. Where it's stored
Mac app, built-in engine: on your Mac, in ~/Library/Application Support/SOQL AI, with logs in ~/Library/Logs/SOQL AI.
Mac app with Docker, or the web app: in Docker volumes on the machine that runs it.
Hosted by your organisation: on your organisation's server, under its control.
SolvixaLabs has no access to any of these unless you send us something yourself.
4. What leaves your device
SOQL AI connects only to the services below, and only to do what you ask:
Salesforce: to sign in and to read or change data and metadata in your org through Salesforce's APIs (REST, Tooling, Bulk and, for Apex, SOAP). Your agreement with Salesforce and Salesforce's privacy policy apply.
OpenAI: only when you use Generate, Optimize or Explain. See the AI assistant.
Salesforce CLI (Mac app, if you import from it): SOQL AI runs the sf command on your Mac to list your orgs and read their sessions. It turns off the CLI's own telemetry and automatic updates while doing so.
Google Fonts: the interface loads its fonts from fonts.googleapis.com and fonts.gstatic.com, which shares your IP address and browser details with Google. See Google's privacy policy.
SOQL AI doesn't use cookies for tracking, and doesn't send usage statistics, crash reports or other telemetry to SolvixaLabs or anyone else. We don't sell or share personal information.
5. The AI assistant
When you use Generate, Optimize or Explain, SOQL AI sends OpenAI:
your plain-English request, or the query you want optimized or explained (including any values in its filters),
the labels and API names of the objects involved, and the names, types and relationships of their fields.
It never sends query results or other record data to OpenAI.
Requests use the OpenAI API key configured in SOQL AI by you or your organisation, so they're handled under that account's agreement with OpenAI and OpenAI's privacy policy and API data usage policies. If you don't configure a key, nothing is sent to OpenAI. Avoid putting personal or confidential details in AI requests unless your organisation allows it.
6. When you contact us
If you email us for support, we receive what you send: your name, email address, message and any attachments. We use it only to help you and to improve SOQL AI. We keep it for 24 months after the conversation ends, unless you ask us to delete it sooner. Please don't send passwords, tokens, API keys or customer data.
We use email provider / help desk tool to handle support email.
7. Security
Saved Salesforce passwords and tokens are encrypted with AES-256-GCM using a key held only by your installation.
SOQL AI account passwords are hashed with bcrypt.
Access is controlled by roles. Changes to Salesforce data need the developer or admin role, are refused on read-only connections, and need a typed confirmation on production orgs.
Sign-in sessions use signed tokens, and the web app is meant to run on your own machine or private network.
Because SOQL AI runs on your systems, its security also depends on them. Keep your device or server, the app's encryption and signing keys, and your OpenAI key secure.
8. How long data is kept
Data stays in SOQL AI until you or your administrator delete it. Caches expire on their own within minutes. Deleting a saved connection deletes its stored credentials. Uninstalling SOQL AI and deleting its folders or Docker volumes removes everything (see Support).
9. Your choices and rights
Because SOQL AI's data is stored on your own systems, you can see, export, correct and delete it directly: in the app, or by deleting its data as described above.
Depending on where you live, for example under the GDPR or Californian law, you may have rights to access, correct, delete, restrict or object to the use of personal information, and to complain to a data protection authority. For information we hold because you contacted us, write to the address below and we'll respond within the time the law requires.
10. If your organisation runs SOQL AI
When your employer or another organisation installs SOQL AI for you, that organisation decides how it's used and is responsible for the data in it. Contact them first about access, corrections or deletion.
11. Children
SOQL AI is a professional tool and isn't meant for anyone under 16. We don't knowingly collect information from children.
12. Changes to this policy
We'll update this policy when SOQL AI changes how it handles information, and change the "Last updated" date above. For significant changes, we'll also tell you in the app or on this page before they take effect.