HubSpot Data Processing

1. Overview

OpsAgent provides apps and integrations that connect to your HubSpot account to deliver their functionality. This page explains how we gain access to your HubSpot data, what data we process, and how we handle it.

2. How We Access Your HubSpot Data

OAuth Authorization

OpsAgent uses HubSpot's official OAuth 2.0 protocol to access your HubSpot account. When you install one of our apps, you are redirected to HubSpot's authorization screen where you can review and approve the specific permissions (scopes) the app is requesting.

No data is accessed until you explicitly authorize the connection through HubSpot's consent dialogue. You retain full control over which HubSpot account the app is connected to and can revoke access at any time through your HubSpot account settings.

Scopes and Permissions

Each app requests only the HubSpot scopes it needs to function. These scopes are transparently displayed during the installation process on HubSpot's authorization screen. Scopes may include access to CRM objects (contacts, companies, deals), properties, workflows, and other HubSpot features depending on the app's functionality.

Some scopes are required for core app functionality, while others may be optional and enable additional features. You will always see the full list of requested permissions before granting access.

Access Tokens

Upon authorization, HubSpot issues an access token and a refresh token to OpsAgent. These tokens are stored securely and encrypted in our systems. The access token is used to make API calls to HubSpot on your behalf. Refresh tokens are used to obtain new access tokens when they expire, ensuring continued service without requiring you to re-authorize.

3. What Data We Process

HubSpot CRM Data

Depending on the app you install and the scopes you authorize, OpsAgent may read, create, update, or delete data in your HubSpot account. This can include CRM records (such as contacts, companies, deals, and tickets), properties, associations, workflows, and other HubSpot objects as required by the app's functionality.

Data Processed Within Our Systems

Some apps may temporarily process or cache HubSpot data within our systems to perform their functions (e.g., running calculations, generating reports, or executing workflow actions). This data is processed solely for the purpose of delivering the app's functionality and is handled in accordance with our Privacy Policy.

Usage and Billing Data

We collect data about how our apps are used (e.g., number of actions performed, API calls made) for the purpose of billing and service optimization. This usage data does not include the content of your HubSpot records.

4. Data Storage and Retention

In the majority of cases, OpsAgent does not persistently store your HubSpot data. Data is fetched from HubSpot in real time solely for the purpose of performing the requested action (e.g., executing a workflow action, running a calculation, or displaying information). Once the action is completed, the data is discarded and is not retained in our systems.

In limited cases where temporary caching or storage is required for an app's functionality (e.g., generating reports or batch operations), data is retained only for as long as strictly necessary to complete the task and is deleted promptly thereafter.

OpsAgent is committed to full transparency regarding data handling. Where an app does store or cache HubSpot data, this will be clearly indicated within the product itself, so that users are always informed about how their data is being processed at any given time.

When you uninstall an app or revoke access, any HubSpot data that may have been stored will be deleted from our systems within a reasonable timeframe, unless statutory retention obligations require otherwise.

5. Data Security

We implement appropriate technical and organizational measures to protect your HubSpot data, including encryption of access tokens, secure API communication over HTTPS, and access controls limiting who within our organization can access your data.

6. Your Rights and Control

You maintain full control over the data OpsAgent can access:

• Revoke access: You can disconnect any app at any time through your HubSpot account settings under "Connected Apps," which immediately revokes our access tokens.
• Request data deletion: You can request the deletion of any data we have stored from your HubSpot account by contacting us at contact@opsagent.com.
• Data portability: You have the right to receive a copy of the data we process from your HubSpot account in a structured, machine-readable format.

For all other data protection rights, please refer to our Privacy Policy.

7. Legal Basis

The processing of your HubSpot data is based on Art. 6(1)(b) GDPR (performance of a contract) as it is necessary to provide the services you have requested by installing our apps. Where applicable, processing may also be based on Art. 6(1)(f) GDPR (legitimate interest) for purposes such as service improvement and security, or Art. 6(1)(a) GDPR (consent) where you have explicitly authorized access through HubSpot's OAuth consent dialogue.

8. Third-Party Sub-Processors

To provide our services, your HubSpot data may be processed by the following categories of sub-processors:

• Hosting provider: For data storage and server infrastructure.
• HubSpot: As the source platform, data is exchanged via HubSpot's APIs.

All sub-processors are contractually bound to handle your data in compliance with the GDPR and our data processing standards.

9. Contact

If you have questions about how we process your HubSpot data, please contact us at contact@opsagent.com.