1. Overview

This Privacy Policy explains how AdviVest Intelligent ("AdviVest," "we," "us," or "our") collects, uses, and protects information in connection with Quote Builder CRM Card for HubSpot (the "Service"). By installing or using the Service, you agree to the practices described here.

2. Data We Collect

We collect the following categories of information:

Account & authorization data: OAuth tokens issued by HubSpot when you install the Service, and your HubSpot portal ID.
Configuration data: Settings you configure per HubSpot portal, such as default sender details, terms text, and pipeline stage visibility rules.
HubSpot CRM data: Accessed in real time via the HubSpot API to power the quoting workflow, as detailed in Section 3. We do not maintain a persistent copy of your CRM records.
Usage & diagnostic data: Basic technical logs (such as timestamps, error messages, and request metadata) used to operate and troubleshoot the Service.

3. HubSpot Data We Access

The Service requests the following HubSpot scopes and data access, consistent with our public Shared Data disclosure:

Deals (read/write) — deal name, stage, owner, currency; line item associations.
Quotes (read/write) — existing and newly created quote objects, including sender, terms, and e-signature settings.
Line Items (read/write) — creation, updates, deletion, and association with quotes and deals.
Contacts (read only) — names and emails, to display buyer information.
Companies (read only) — name and address, for buyer details.
Products (read only) — your product library, to populate line items.
Owners (read only) — deal owner name and email, to pre-fill sender information.
Quote Templates & Deal Pipelines (read only) — for template selection and admin configuration.

This data is retrieved from HubSpot on demand to render the card and generate quotes. We do not store copies of your Deals, Contacts, Companies, or Quotes on our own servers beyond what is temporarily needed to process a request.

4. How We Use Data

We use the data described above solely to:

Operate the core functionality of the Service (building, previewing, publishing, and updating quotes);
Maintain your authorization and per-portal configuration;
Diagnose and fix technical issues;
Communicate with you about the Service, such as service notices or support responses.

We do not sell your data, and we do not use HubSpot CRM data for advertising purposes.

5. Legal Basis for Processing

Where applicable data protection law (such as the GDPR) requires a legal basis, we process data based on: performance of a contract (providing the Service you installed), our legitimate interests in operating and securing the Service, and, where required, your consent granted through the HubSpot OAuth authorization flow.

6. Data Sharing & Third Parties

We do not sell or rent your data. We may share limited data with:

Infrastructure providers who host our application and securely store OAuth tokens and configuration settings (for example, cloud hosting and managed data-store providers);
HubSpot, Inc., as necessary to authenticate and exchange data through their API;
Legal or regulatory authorities, where required to comply with applicable law.

All third-party processors are bound by confidentiality and data protection obligations consistent with this Policy.

7. Data Storage, Retention & Deletion

OAuth tokens and per-portal configuration settings are stored only for as long as the Service remains installed on your HubSpot portal. If you disconnect or uninstall the Service:

Quote data already created in HubSpot (Quote objects, line items, and associations) remains in your HubSpot account — we do not delete your HubSpot records.
Our access token, refresh token, and stored configuration for that portal are deleted from our systems.

8. Security

We use industry-standard technical and organizational measures to protect data, including encrypted transport (HTTPS/TLS) for all API communication, encrypted storage of OAuth tokens, and restricted access to production systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, and to data portability or objection to processing. Because most CRM data is stored in your own HubSpot account, many of these rights are exercised directly within HubSpot. For data we hold directly (tokens and configuration), you can exercise these rights by uninstalling the Service or contacting us at advivest@gmail.com.

10. Cookies & Tracking

The Service operates primarily within the HubSpot UI Extensions framework. The in-app card does not set tracking cookies of its own.

11. Children's Privacy

The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date below. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at advivest@gmail.com or AdviVest Intelligent, Ahmedabad, Gujarat, India.