1. Privacy Statement Availability
Per the ISV Partner Requirements, Docgalore must “maintain at all times a current privacy statement available on Partner’s website” and notify Salesforce and end users in writing before any updates. Docgalore provides its Privacy Notice on its website and AppExchange listing, with a clear “Effective Date: August 1, 2025,” ensuring customers see the latest version prior to installation.
2. Data Collection & Legal Basis
Docgalore specifies exactly what it collects:
• Information you provide contact forms (name, email, phone, company), account setup (username, password, preferences).
• Automated & cookie data: IP address, browser type, device information, first-party cookies (authentication, performance).
3. Data Sharing & Transfers
Docgalore clearly enumerates recipients: sub-processors
(cloud hosts, email providers), service providers (billing, analytics,
support), and authorities when legally required—and explicitly states it does
not sell or rent personal data, satisfying the “Transparency” requirement.
4. User Rights & Requests
Docgalore informs users of their rights to access, correct,
or delete data; withdraw marketing consent; and lodge complaints via <support@docgalore.com>, with a 30-day response commitment.
This fulfils requirements to describe data-subject rights and request
processes.
5. Security Measures
Docgalore implements TLS 1.3 in transit, AES-256 at rest, plus regular vulnerability scanning and penetration tests. These “appropriate administrative, physical, and technical safeguards” comply with the “Security” mandate for protecting Customer Data.
6. Data Retention & Deletion
Retention policies address active accounts (as needed),
inactive accounts (deleted 90 days post-closure), and logs (180 days). This
granularity supports both AppExchange requirements and lawful retention limits
under data-protection laws.
7. Cookies & Tracking
Docgalore uses only session and analytics cookies (with
opt-out) and respects Do Not Track signals—clearly documenting cookie practices
and offering user choice.
8. Change Management & Versioning
The policy commits to posting material changes with a new “Effective Date” and treating continued use as acceptance aligning with AppExchange’s requirement to notify users and Salesforce of updates
9. Contact Information
Docgalore lists email <support@docgalore.com> for privacy inquiries, satisfying the “Share Contact Info” requirement for incident reporting and support.
Conclusion
Docgalore’s Privacy Notice comprehensively covers all AppExchange ISV Partner Requirements for privacy statements, including accuracy, transparency, security, data-subject rights, and update procedures, ensuring full compliance for listing its managed package on the Salesforce AppExchange
