Privacy Policy

What we collect

• Session data — HubSpot OAuth tokens, portal IDs, and cache IDs in an encrypted cookie (15 minutes). Used only to run scans and show your results.
• Scan cache — Scan and comparison results stored temporarily in our database (10 minutes). Deleted when you disconnect or when the session ends.

How we use it

We use session data to call the HubSpot API on your behalf and display scan and compare results. We do not store your email; it is used only to send the report you request. We do not sell your data.

Storage & retention

Session cookie expires in 15 minutes. Cached scan and comparison data is removed after 10 minutes or immediately when you disconnect. We do not store your email or lead data. You can disconnect at any time to clear your session and delete cached data.

Cookies

We use a single httpOnly session cookie to keep you logged in to HubSpot and to associate scan/cache data with your session. No third-party advertising cookies.

HubSpot

We access your HubSpot account only via OAuth with the scopes you approve. We read configuration (properties, pipelines, objects, etc.) to generate reports. We do not write to or delete data in your HubSpot account.

Your choices

Use "Disconnect" in the app to end your session, revoke our access, and delete any cached scan/comparison data. For requests or questions, contact us at concret.io.