Privacy Policy — HubSpot AI Analyst

Last updated: July 11, 2026

This Privacy Policy explains how the Chrome extension "HubSpot AI Analyst" (the "Extension") handles your information. The Extension is a free tool that detects HubSpot CRM records related to the web page you are viewing, generates AI summaries, and lets you log activities to HubSpot.

1. Information We Handle

Data	Where it is stored / sent	Purpose
HubSpot OAuth tokens	Stored on our secure server (Google Firebase / Cloud Functions). Never stored in the browser.	To read your HubSpot CRM records and create notes, deals, meetings, contacts, and companies at your request.
Your AI provider API key (Anthropic, OpenAI, or Google)	Stored only locally in your browser (chrome.storage.local). Never sent to our servers.	To call the AI provider you choose, using your own account.
Current page context (domain name, company name from page metadata, LinkedIn profile name)	Sent to the HubSpot API to search for matching records. Not stored on our servers.	To detect whether the page you are viewing relates to a company or contact in your CRM.
CRM record data (contact names, emails, deal information, notes)	Retrieved from HubSpot and, when you request an AI summary or generation, sent directly from your browser to the AI provider you selected. Not stored on our servers.	To generate summaries and drafts you explicitly request.
Extension settings (selected AI provider, panel position)	Stored only locally in your browser.	To remember your preferences.

2. What We Do NOT Do

We do not sell or rent your data to anyone.
We do not use your data for advertising.
We do not collect your browsing history. The current page's domain is used transiently for CRM lookup and is not logged or stored by us.
We do not transmit your AI API keys to our servers.
We do not use your data for any purpose unrelated to the Extension's single purpose described above.

3. Third-Party Services

HubSpot (CRM data access via OAuth) — HubSpot Privacy Policy
Google Firebase / Google Cloud (authentication and secure token storage) — Google Privacy Policy
AI Providers you choose: Anthropic (Privacy Policy), OpenAI (Privacy Policy), or Google Gemini (Privacy Policy). Data you submit for AI processing is governed by the provider's terms under your own API account.

4. Data Retention and Deletion

Locally stored data (API keys, settings) can be deleted at any time by removing the Extension or clearing its storage.
HubSpot OAuth tokens stored on our server are deleted upon your request, or you can revoke the Extension's access at any time from your HubSpot account settings (Settings → Integrations → Connected Apps), which immediately invalidates the tokens.

5. Security

OAuth token exchange is performed over HTTPS via Google Cloud Functions. HubSpot client secrets are kept server-side only and never included in the Extension. Communication with HubSpot and AI providers uses TLS encryption.