Black Widow is a desktop app that parses, groups, and analyzes Salesforce debug logs locally. This page lists every network call the app can make, exactly what each one carries, and the one feature that is an explicit exception. No lawyer-speak.
Last updated: July 28, 2026 · Applies to Black Widow v1.7 and later.
Parsing, transaction grouping, phase detection, execution trees, SOQL/DML analysis, recommendations, health scoring, and plain-English explanations are all computed on your machine. Your debug log files are read from your disk and are never uploaded to us or anyone else by these features. There is no server-side log processing. There are no accounts.
If your security team bans pasting production logs into cloud tools, Black Widow's core analyzer is compatible with that policy out of the box.
| Call | When | What it carries |
|---|---|---|
| Update check | On launch | Version metadata request to GitHub releases. No log data. |
| Your Salesforce org | Only if you connect an org (OAuth) | Standard Salesforce API calls you initiate (download logs, manage trace flags). Credentials go to Salesforce, not to us. |
| License validation | Only if you activate a license key | Your license key and email to LemonSqueezy / our license server. No log data. |
| Usage telemetry | Only if you opt in (off by default, asked once) | Anonymous feature-usage events (e.g. “export clicked”). Never log content, org names, record IDs, or file names. |
| AI analysis (Pro) | Only when you click an AI action, after explicit consent | See the exception below. |
That is the complete list. If it's not in this table, the app doesn't send it.
The optional Pro feature “AI analysis” works by sending content from the log you're analyzing, plus your questions about it, to Anthropic's Claude API — using your own API key, under Anthropic's commercial terms. We never see this traffic; it goes from your machine to Anthropic directly.
If your organization prohibits sending log data to third-party AI services: don't enter an API key and don't grant consent. Everything else works fully.
This website uses Plausible for anonymous, cookieless page analytics.
Because analysis happens on your machine and your logs are never uploaded, using Black Widow's core analyzer does not create a new data processor relationship, does not transfer personal data internationally, and adds nothing to your record of processing activities (ROPA). Under Brazil's LGPD (Lei Geral de Proteção de Dados) — as under GDPR — the safest place for production debug logs full of PII is the one they never leave: your own machine.
Em português: como a análise acontece na sua máquina e os logs nunca são enviados a ninguém, usar o analisador principal do Black Widow não cria um novo operador de dados, não gera transferência internacional de dados pessoais e não adiciona nada ao seu registro de operações. A única exceção é o recurso opcional de IA descrito acima — ele só roda com seu consentimento explícito e sua própria chave de API.
Black Widow includes a PII scanner that flags sensitive values (emails, phone numbers, names) inside logs before you share them with a colleague or attach them to a support ticket. That scan is local too.
If Black Widow Pro isn't useful to you, you get your money back. No hoops.
For procurement teams: purchases are handled by Lemon Squeezy, LLC as merchant of record — they issue tax-compliant invoices and handle VAT/sales tax. LemonSqueezy's buyer terms apply to the transaction.
Found a security issue? Please email victorfelisbino@gmail.com privately rather than opening a public issue (see SECURITY.md). We take reports seriously and respond fast.