Privacy Policy
Last updated: May 15, 2026
1. Overview
TicketFlow ("the App") is a third-party HubSpot integration that provides idle ticket monitoring and automated follow-ups. This Privacy Policy explains what data we access, how we use it, and how we protect it.
2. Data We Access
When you install TicketFlow, you authorize it to access specific data in your HubSpot portal through OAuth 2.0. The App accesses:
| Data Type | Purpose | Stored? |
|---|---|---|
| Ticket metadata (status, dates, stage, owner) | Evaluate idle duration and escalation level | No |
| Contact associations | Sync ticket status to contact properties | No |
| Conversation threads | Send threaded email replies (Pro only) | No |
| Pipeline configuration | Resolve stage names and identify closed stages | No |
| Owner/user information | Send emails as the ticket owner | No |
| OAuth tokens | Authenticate API requests to your portal | Yes (encrypted) |
| Portal settings | Store your TicketFlow configuration | Yes |
| Stripe customer ID | Manage your Pro subscription | Yes |
3. Data We Do NOT Collect
TicketFlow does not collect, store, or transmit:
- Ticket content or descriptions
- Customer names, email addresses, or personal data
- Email message content (messages are sent through HubSpot's API, not our servers)
- Browser cookies or tracking data
- Analytics or usage data beyond basic server logs
4. Data Storage and Security
Data that we do store (OAuth tokens, portal settings, subscription status) is held in a Supabase database with row-level security (RLS) enabled. OAuth tokens are used solely to make authenticated requests to HubSpot's API on your behalf. All data transmission uses HTTPS encryption.
5. Third-Party Services
TicketFlow uses the following third-party services:
- HubSpot — CRM platform (your data remains in HubSpot)
- Vercel — Application hosting (serverless functions)
- Supabase — Database for OAuth tokens and settings
- Stripe — Payment processing for Pro subscriptions
Each of these services maintains its own privacy policy and security practices.
6. Data Retention
We retain your OAuth tokens and settings for as long as TicketFlow is installed on your portal. If you uninstall the App, you may request deletion of all stored data by contacting support@yourticketflow.com.
7. Your Rights
You may:
- Revoke TicketFlow's access at any time by uninstalling the App from your HubSpot portal
- Request a copy of any data we store about your portal
- Request deletion of your stored data
To exercise any of these rights, contact support@yourticketflow.com.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will make reasonable efforts to notify users of material changes. Continued use of the App after changes constitutes acceptance of the updated policy.
9. Contact
Questions about this Privacy Policy? Contact us at support@yourticketflow.com.