Zuora Inspector – Privacy Policy

Last updated: October 23, 2026

Zuora Inspector ("the extension") is a browser extension for Zuora administrators and developers. This policy explains what data the extension accesses, how it is used and where it is stored.

In short: the extension has no servers, collects no data, and never sends your data to the developer or to any third party. Everything happens in your browser, between you and your own Zuora tenant.

1. Data the extension accesses

Zuora session cookies. On Zuora websites (*.zuora.com) the extension reads the session cookies set by Zuora when you log in (for example ZSession and Zuora-Tenant-Id). It uses them only to call your own Zuora tenant's APIs as the logged-in user, with the same permissions you already have. The cookie values are never stored, logged or transmitted anywhere other than to Zuora.

Zuora data you choose to view or change. When you inspect a record, run a query, import data or call an API endpoint, the extension requests that data from your Zuora tenant and shows it in your browser. Changes you make are sent only to your Zuora tenant, and only after you confirm them.

Page address. To detect the record you are looking at, the extension reads the address (URL) of the Zuora page you are on. This happens locally and is not sent anywhere.

2. Data stored on your device

The extension saves the following in your browser's local extension storage (chrome.storage), on your device only:

· preferences (theme, position of the side button);

· per-tenant settings, including optional OAuth client credentials if you choose to enter them;

· query history, saved queries, REST request history and a list of recently inspected records (object type, ID and title);

· a temporary cache of Zuora object metadata, cleared when the browser is closed.

This data is not synced to your Google account and is not shared. You can delete it at any time from Settings › Data in the extension, and it is removed entirely when you uninstall the extension.

3. Where requests go

The extension communicates only with:

· your Zuora tenant's websites and APIs (*.zuora.com);

· Zuora's own file storage on Amazon Web Services (*.amazonaws.com), only to download the result file of a Data Query you started.

The extension does not use analytics, tracking, advertising, or any server operated by the developer, and it does not load remote code.

4. Sharing and sale of data

The developer does not collect, receive, sell, rent or transfer any user data. No data is used for purposes unrelated to the extension's single purpose, nor to determine creditworthiness or for lending purposes.

5. Security

All communication with Zuora uses HTTPS. Access is limited to Zuora domains. Write operations require an explicit action from you, with an extra confirmation on production tenants.

6. Children

The extension is a professional tool and is not directed at children.

7. Changes to this policy

If this policy changes, the updated version will be published at this address with a new "Last updated" date.

8. Contact

Questions about this policy:dcdev.help@gmail.com.

Zuora Inspector is an independent tool and is not affiliated with, endorsed or sponsored by Zuora, Inc. "Zuora" is a trademark of Zuora, Inc.