AdviVest Logo

Privacy Policy

Last updated: August 9, 2026

On this page

1. Scope of Policy2. Information We Collect3. Information We Do Not Collect4. Data Storage & Locations5. Third-Party Subprocessors6. Data Security Measures7. Retention & Deletion8. GDPR & CCPA Rights9. Policy Changes10. Contact Details

1. Scope of Policy

This Privacy Policy describes how AdviVest ("we", "us", or "the App") collects, processes, and protects your information when you install our app from the HubSpot App Marketplace. By using the App, you consent to the data practices described in this policy.

2. Information We Collect

We collect data required to configure your portal setups:

  • Configuration metadata: hierarchy levels, values, and association filter rules.
  • OAuth tokens: encrypted access tokens used to pull dropdown options and filter associations.
  • Tenant metadata: Portal ID, plan tier, and account settings.

3. Information We Do Not Collect

We do not copy or store your core CRM record content (e.g. contact names, company deals, email histories). All CRM records are processed transiently in memory to resolve cascading options and filters and are immediately discarded.

4. Data Storage & Locations

Configuration data is stored in Neon PostgreSQL databases located in the US-East (Virginia) region. Caches are managed securely via Upstash Redis.

5. Third-Party Subprocessors

We use the following subprocessors to run the app infrastructure:

  • Vercel, Inc. (App hosting)
  • Neon, Inc. (Database hosting)
  • Upstash, Inc. (Cache & queue management)
  • HubSpot, Inc. (CRM target host)

6. Data Security Measures

All OAuth keys are encrypted at rest using AES-256. API routes verify signature tokens using HubSpot signature V3 validation to prevent unauthorized request processing.

7. Retention & Deletion

Your tree mappings are retained as long as the integration remains connected. If you uninstall, data is soft-deleted for 30 days before being permanently deleted from our primary servers.

8. GDPR & CCPA Rights

Under GDPR/CCPA, you have the right to request a copy of your configuration data or ask for its immediate deletion. To submit a request, contact us using the email below.

9. Policy Changes

We may update this policy periodically. We will notify you of any material changes by updating the last updated date or via the email linked to your admin portal.

10. Contact Details

For questions or requests, please contact: advivest@gmail.com