Your HubSpot data stays yours

Sighub reads operational metadata from HubSpot: timestamps, dates, status fields, amounts, currencies, and owner assignments. It never reads email body content, note content, call recordings, meeting notes, or ticket content.

• Portal configuration (mapped properties, renewal window, owner routing)
• Encrypted HubSpot access and refresh tokens (AES-256-GCM)
• One risk snapshot per company (company name, signal type, severity, evidence strings, value at risk, owner name, task status, timestamps)
• Temporary OAuth state records (single-use, 15-minute expiry)

Sighub does not store email bodies, notes, call recordings, meeting content, ticket content, or full contact/deal records.

Only HubSpot tasks: subject, body, status, priority, due date, owner (when available), and company association. Sighub does not modify existing Company, Contact, Deal, or Ticket records.

Sighub requests these HubSpot scopes:

• Companies, Contacts, Deals, and Owners (read)
• Email activity metadata (read)
• Tickets (read)
• Tasks (create and update, for Sighub-created tasks only)

The Sighub card appears in the HubSpot Company sidebar and shows:

• Active signal: Renewal Risk, Engagement Risk, or Healthy
• Explanation: why this account needs attention
• Evidence: the specific signals behind it
• Value at risk: the account value when available
• Owner and last evaluated timestamp

Opening or refreshing the card can trigger a fresh scan of that company when task automation is active.

The value at risk is sourced in this order:

1. Company value: a mapped numeric property with a value > 0, plus a valid 3-letter hs_currency_code.
2. Deal fallback: Sighub checks associated deals (active first, then closed-won, then any valid deal with a positive amount).

Sighub is not real-time. Scans are triggered three ways:

• Scheduled: a background scheduler checks every 60 minutes and runs a full portal scan when the last completed scan was at least 23 hours ago.
• On open / refresh: opening the Sighub card or settings panel can trigger a scan.
• Manual: from the settings panel.

The only HubSpot webhook used is for app lifecycle events (e.g., uninstall).