Effective October 16, 2026
Conga Support Toolkit is a Chrome extension for Conga's support team. It takes a support engineer from a Salesforce Org ID to that org's Subscriber Support login page in Conga's License Management Org (LMO). This policy explains what the extension reads, where that data goes and what it keeps.
https://apttus2.my.salesforce.com), using the session you already have there.| Data | When | Why | Where it goes |
|---|---|---|---|
| The Org ID you paste or type | When you use the popup | To check the org and open its login page | To the LMO, in the license lookup |
| Clipboard text | When the popup opens (auto-paste, which you can turn off) or when you click a paste button | To fill in a copied Org ID | Nowhere. Text that isn't an Org ID is discarded at once |
Your LMO session cookie (sid) | During the checks | To call the LMO's Salesforce REST API as you | Back to the same LMO only, as the API's bearer token |
| License records for the org (account name, package, status, edition, sandbox or production) | During the checks | To show whether the org is a subscriber | Shown in the popup only |
| Whether your LMO user has the "Log in to Subscriber Organization" permission | During the checks | To show whether you may log in | Shown in the popup only |
| Page loads in the tabs the extension opens on Salesforce sites | While those tabs load | To know when sign-in has finished and when to move the login tab to the Subscriber Support console | Nowhere. Other tabs are ignored and nothing is recorded |
The extension never stores your session cookie, license details or clipboard text other than an Org ID.
If you aren't signed in to the LMO, the extension opens the single sign-on link set in its options (by default, Conga's Microsoft My Apps link for the LMO) in a background tab. That is the normal Microsoft and Salesforce sign-in. The extension never sees your password.
Data from the extension is not sold, not transferred to third parties, not used for advertising or anything unrelated to the extension's purpose, and not used to determine creditworthiness or for lending.
If the extension's data handling changes, this policy and its effective date will be updated.
Questions about this policy: Srikanth Pullela, spullela@conga.com.