Privacy Policy: CPQ → RCA Kit

Last updated: November 10, 2026

CPQ → RCA Kit is a Chrome extension that reads configuration data from a Salesforce org you are already logged in to, and estimates the effort of migrating from Salesforce CPQ to Revenue Cloud Advanced. Everything happens in your browser. The extension has no server of its own.

What the extension accesses

Salesforce session cookie. To call the Salesforce API as you, the extension reads the sid session cookie that your browser already holds for Salesforce domains (*.salesforce.com, *.force.com, *.salesforce-setup.com). The session ID:

• is sent only to the Salesforce org it belongs to, as the API authorization header;
• is kept in memory while a scan runs, and is never written to storage;
• is never sent to the developer or any third party.

Salesforce org data. The extension sends read-only (GET) API requests to collect:

• record counts;
• the definitions of price rules, product rules, summary variables and bundles;
• field metadata;
• the names of Apex triggers and other components that reference CPQ.

It does not read customer records such as accounts, contacts or quote contents, apart from counting how many exist.

Quote Calculator Plugin source code is analyzed in memory. Only statistics are kept: line count, which hooks are used, and whether it makes API calls. The source itself is never saved.

The extension never creates, changes or deletes anything in your Salesforce org.

What is stored, and where

The most recent scan for each org is saved in chrome.storage.local, on your device only. It contains:

• the org name and ID;
• the names and settings of the CPQ rules and components listed above;
• counts and estimate figures.

You can delete it at any time by removing the extension or clearing its data. A scan leaves your device only if you click Export JSON and share the file yourself.

What is not collected

The extension does not collect analytics, telemetry or crash reports. It does not use cookies of its own, and it does not show ads. It does not sell or transfer data to anyone. It does not load remote code.

Limited Use

The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the extension's single purpose: scanning a Salesforce CPQ org and showing a migration estimate to the user.

Changes and contact

Changes to this policy will be published at this URL with a new date.

Questions: meghaforce@gmail.com

CPQ → RCA Kit is an independent tool and is not affiliated with, endorsed by or sponsored by Salesforce, Inc. Salesforce, CPQ and Revenue Cloud are trademarks of Salesforce, Inc.