Legal

Privacy Policy

Plain-language summary, not a substitute for legal advice — last updated as this product was being built.

What we collect

Your email and organization name (from signup), your HubSpot deal data (only what your connected pipeline exposes — deal names, amounts, stages, and timestamps, via HubSpot's own OAuth consent screen), and payment details handled entirely by Stripe — we never see or store your card number ourselves.

Why

Solely to run the service you signed up for: detecting stale deals in your HubSpot pipeline and sending the alerts and escalations you configure.

How it's protected

HubSpot access tokens are encrypted before ever being stored (AES-256). Every customer's data is isolated from every other customer's at the database level (Row-Level Security), enforced even against our own application code, not just the interface.

Who else touches your data (subprocessors)

  • Supabase — database and authentication
  • Vercel — hosting
  • HubSpot — the source of your deal data, via your own connection
  • Stripe — payment processing
  • Resend — sending alert emails

Retention & deletion

Your data is kept for as long as your account is active. You can permanently delete your account and all associated data at any time from the Account page — this is a real, complete deletion, not a soft disable. If you disconnect HubSpot, your stored access tokens are cleared immediately, not just marked inactive.

Contact

Questions or a deletion request handled manually: sher5290@outlook.com