// Security & data
Security & data access
Sighub helps HubSpot teams detect renewal risk earlier through Renewal Radar, its HubSpot app, and it is built to be minimal with your data. Renewal Radar by Sighub reads the HubSpot metadata it needs to detect renewal risk, writes a single follow-up task, and stores as little as possible.
What Renewal Radar reads
- Company properties: name, owner, currency and eligible renewal-timing and value fields discovered by Renewal Radar.
- Deals, line items, quotes, subscriptions and custom objects for renewal timing and value.
- Email, meeting, ticket and contact activity as metadata only: timestamps, direction, status.
- Ownership, so the follow-up task can be routed to the right person.
What Renewal Radar never reads or stores
- No email bodies, note content, call recordings, meeting notes or ticket content.
- No email, note, meeting, call-recording or ticket-conversation content is stored. Operational risk and task fields are stored as listed below.
- Renewal Radar’s decision engine uses deterministic rules, not an LLM. When you attach Agent Tools, your HubSpot agent receives the tool results needed for the task. HubSpot’s AI terms govern the agent itself.
How Sighub stores and deletes Renewal Radar data
HubSpot OAuth tokens are encrypted with AES-256-GCM. Sighub stores portal configuration and one operational risk snapshot per company, plus action records, controls, optional report-recipient email addresses, random report/share tokens, and Stripe billing identifiers. Risk and action records can include Company name, renewal date, value, evidence strings, assigned owner details, task status, and timestamps.
When you uninstall Renewal Radar from your HubSpot portal, the stored portal record and its linked configuration, tokens, snapshots, actions, controls, report access, and billing links are deleted. HubSpot tasks Renewal Radar already created stay in your account as standard HubSpot tasks.
Service continuity
HubSpot remains the source of truth for your customer records. Sighub does not require you to move your companies, deals, contacts, or renewal history into a separate system.
If the Sighub service becomes temporarily unavailable, your existing HubSpot records and previously created Renewal Radar tasks remain in HubSpot. New scans and new Renewal Radar tasks pause until service is available again. You can revoke Sighub access at any time by uninstalling the app; portal-linked Sighub service data is then deleted as described above.
See also the full Privacy Policy, Data & privacy docs, Terms, or the FAQ.