No Pledgely copy of your Salesforce data.

Every Pledgely app is installed as a managed package and operates from Salesforce. Pledgely does not run a separate application database that mirrors your Salesforce records, and we do not maintain standing access to your org. When an app uses a provider account you connect, Salesforce or your browser communicates directly with that provider. The provider processes only the data you send through that account under your relationship with that provider.

The Salesforce records created by Pledgely apps follow your org's residency, backup, encryption, and Shield posture because they are Salesforce data. Data intentionally sent through a connected provider follows the terms and residency controls of the provider account you own.

Pledgely apps connect to communication providers through accounts you hold. Your Twilio account, your phone numbers, your message logs, your billing relationship. Same for SendGrid when Pledgely Mail ships. Credentials are stored in protected configuration inside your org, guarded from user access, and used only by the app's service layer. If you ever leave Pledgely, the account, the numbers, and the provider-side history are still yours.

Public forms are the sharpest security edge any org exposes, so Pledgely Forms treats the anonymous visitor as untrusted by design. Audience tiers (staff, logged-in portal users, and anonymous public visitors) are enforced on the server and cannot be faked from the browser. Spam is filtered by built-in spam protection, including reCAPTCHA v3 with a v2 challenge fallback and rate limits. And if the app cannot positively confirm that a field is allowed to be written, the submission stops rather than quietly dropping what someone typed. Because we license per org rather than per guest, nothing in the design has a reason to loosen guest checks for licensing's sake.

Each app ships permission sets that grant exactly what a role needs: admin setup and everyday use are separate grants, and nothing asks for "Modify All Data" as a shortcut. Automation honors your sharing model wherever a person is driving it. The few places that must run with elevated access, like receiving an incoming message from your provider, are deliberately narrow, logged, and documented.

AppExchange security review: every Pledgely app passes Salesforce's security review before general availability on the AppExchange. Pledgely SMS and Pledgely Forms are pre-listing today; this page is updated with each app's listing status as it goes live.

Usage telemetry: managed packages can report aggregate feature-usage signals through Salesforce's feature-management framework. We use it for counts and adoption flags, never record content, never personal data. The specifics are disclosed in the privacy policy.

Support access: support is delivered to named admin contacts. We access a customer org only through access you grant, scoped and time-boxed by you.