Version 1.1 — Effective November 2, 2026

    Privacy Notice: PausePlay AI

    This notice supplements our Privacy Policy for PausePlay AI, the optional assistant in the PausePlay Salesforce app (the assistant is called Meliv). The PausePlay AI Terms describe the service itself.

    1. Who is responsible

    Saika Technology Services GmbH, Friedenstraße 8, 22089 Hamburg, Germany. Email: support@pauseplay.app.

    For the content of PausePlay AI requests, which comes from the customer's Salesforce organization, the customer is the controller and we process it on the customer's behalf (Art. 28 GDPR, see section 8). For account, licence, security and usage records of the PausePlay AI service we are the controller.

    2. What PausePlay AI sends

    PausePlay AI is used only after a PausePlay administrator connects the Salesforce organization and accepts these terms. Each analysis or question sends:

    • Automation metadata of the objects being analyzed: names, labels, types, objects, active state, trigger events and timing of Flows, Apex triggers and validation rules, and PausePlay's own check results as codes.
    • The task or question the user types, sent as written (up to 2,000 characters). Do not include personal data in it.
    • Only if a PausePlay administrator turns it on (off by default): the formulas of active validation rules and the descriptions of active Flows and validation rules on the objects being analyzed.
    • Technical identifiers to our gateway: the Salesforce organization ID, a one-way pseudonym of the Salesforce user ID and the PausePlay version. These are not sent to the AI provider.

    Never sent: Salesforce records, Apex source code and credentials. Text that looks like an email address, a Salesforce record ID or a session ID is refused or left out. Other personal data, such as a person's name typed into a task description, or contained in an automation label or description, is not detected automatically.

    3. Why, and on what legal basis

    To analyze automation risks and propose a PausePlay configuration on the user's request (Art. 6(1)(b) GDPR, performance of the contract with the customer); to secure the service, count usage against the allowance and prevent misuse (Art. 6(1)(f) GDPR). AI output is advisory: it can contain mistakes and nothing is changed in Salesforce without a person's explicit action.

    4. Recipients and processors

    • Supabase, Inc. (USA; data hosted in the EU, Frankfurt region): the PausePlay AI gateway and its database.
    • Anthropic (Anthropic Ireland, Limited; Anthropic, PBC, USA): the AI model (Claude) that generates the explanations and proposals. Under Anthropic's commercial terms, Anthropic does not train its models on this content.
    • Salesforce, Inc.: sign-in when connecting, and our licence management (to check that the organization has PausePlay Pro).

    The full list is on our subprocessors page.

    5. Where the data is processed

    Our gateway runs in the EU. The AI model is not EU-only: Anthropic may process requests in any of its regions, including the United States, Europe, Asia and Australia, and stores data in the United States. Transfers rely on the EU Standard Contractual Clauses in Anthropic's Data Processing Addendum (Art. 46(2)(c) GDPR).

    6. How long it is kept

    • Anthropic: inputs and outputs are deleted within 30 days. Content flagged by Anthropic's automated safety systems may be kept for up to 2 years, and data may be kept longer where the law requires it. We do not have a zero-data-retention arrangement.
    • Our gateway stores no request or answer content. It keeps request records (time, outcome, token counts, cost and the user pseudonym) for 400 days for usage accounting and billing. Security and audit records (for example connections and configuration changes, with organization IDs) and the record of a connected organization (organization ID and name) are currently kept for as long as the service is provided; a shorter period will be published here once defined. Sign-in and activation records expire within 30 days.
    • In Salesforce: the analysis is shown in the user's browser and not stored; a proposal is stored only if a user saves it as a PausePlay configuration. The organization's settings record which administrator accepted these terms and when.

    7. Your choices and rights

    PausePlay AI is optional. A PausePlay administrator can disconnect it at any time; users need the PausePlay AI permission set to use it. You have the rights of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). Requests: support@pauseplay.app. You may also lodge a complaint with a supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).

    8. Customers: processing on your behalf

    Where PausePlay AI processes personal data contained in your automation metadata or in your users' text, we act as your processor under Art. 28 GDPR, and these commitments form part of the PausePlay AI Terms:

    • Subject matter and purpose: analyzing automation risks and proposing PausePlay configurations, as described in sections 2 and 3. Types of data: those listed in section 2. Data subjects: your Salesforce users who use PausePlay AI, and any person named in your automation metadata or in task or question text. Duration: for as long as you use PausePlay AI, then as described in section 6.
    • We process it only to provide PausePlay AI as you use it (your documented instructions), and our staff are bound to confidentiality.
    • Security: encrypted connections (TLS), credentials and tokens stored only as hashes, each organization isolated at the gateway, user identities pseudonymized, and no request content stored by us.
    • We use only the subprocessors listed on our subprocessors page and announce changes there in advance; you may object to a change by writing to support@pauseplay.app.
    • We support you with data subject requests and inform you without undue delay of a personal data breach affecting your data.
    • When you disconnect PausePlay AI or the service ends, we keep only the records described in section 6 and delete or anonymize them on request, unless the law requires us to keep them.
    • We provide the information needed to demonstrate these commitments on request.

    Cookies & Privacy

    PausePlay uses essential cookies to ensure the website functions properly. No tracking or advertising cookies are used.