Everything is user-initiated. Clareefai subscribes to no HubSpot webhooks and never writes to HubSpot. Contact records are read while a vendor uses the CRM Import wizard, and only the contacts the vendor explicitly selects are stored in Clareefai; the rest are discarded when the wizard closes. Stored fields are limited to name, email, phone, company, job title and lifecycle stage, and every imported record is tagged with its source so the vendor can always see it came from HubSpot.

Workflow triggers (optional). If a vendor adds a HubSpot contact or deal trigger to a Clareefai workflow, Clareefai periodically checks that vendor's HubSpot records for the chosen change (for example a deal moving to Closed Won) while the workflow is active, and stops as soon as the workflow is paused or deleted. Only the record name, stage, amount, pipeline and the associated contact are read. Clareefai never creates, modifies or deletes HubSpot records.

Permissions. Only contact read access is required to connect. Deal read and deal property read are optional; if a vendor declines them, the connection still succeeds and the deal trigger is simply unavailable.

Security. OAuth access and refresh tokens are encrypted at rest and scoped to a single vendor account. Access tokens are refreshed automatically and never exposed to the browser. Disconnecting HubSpot from within Clareefai deletes the stored credentials immediately.

Data handling. Clareefai does not sell, resell or share HubSpot-sourced data with third parties. See our privacy policy at https://clareefai.com/privacy.