Privacy Policy

This policy explains what DealReel accesses in your HubSpot account, why, and what happens to that data. It applies to HubSpot portal admins and users who install DealReel.

1. Information We Access From HubSpot

When you connect DealReel to a HubSpot portal, we request the following scopes and use them only for the stated purpose:

• Deals (crm.objects.deals.read) — deal name, stage, amount, and close date, to know when to generate a video and what to say in it.
• Contacts (crm.objects.contacts.read) — the associated contact's name and company, to personalize the script.
• Companies (crm.objects.companies.read) — company name, to personalize the script.
• Owners (crm.objects.owners.read) — the deal owner's name, to select the correct rep avatar and voice.
• Files (files.ui_hidden.write) — to upload the finished video into your portal's file manager.
• Timeline (timeline) — to post the finished video as a Timeline Event on the contact and deal record.
• Automation — to appear as a Custom Workflow Action inside HubSpot's workflow builder.

We do not request access to email content, calls, meetings, or any HubSpot data outside of what's listed above.

2. Information We Store

We store your HubSpot portal ID, OAuth access and refresh tokens, the deal/contact/company data snapshot used to generate each video, the generated script, the rendered video file, and basic usage counters (videos sent this billing period). Sales reps' avatar selections are stored against their HubSpot user ID.

3. Third-Party Processors

DealReel relies on the following third parties to function, each of which processes a limited slice of data on our behalf:

• OpenAI — receives deal/contact/company text fields to generate the spoken script. Does not receive video, audio, or account credentials.
• HeyGen — receives the generated script and the rep's chosen avatar/voice ID to render the video. Does not receive raw CRM data beyond the script text.
• Stripe — processes subscription billing. Stripe collects and stores payment details directly; DealReel never sees or stores card numbers.
• HubSpot — the source of CRM data and the destination for delivered videos.

We do not sell CRM data, script content, or video content to any third party, and we do not use your HubSpot data to train AI models.

4. Data Retention

Job records (the deal snapshot, script, and video) are retained for as long as your portal is active, so you can view your video history in the dashboard. If you uninstall DealReel, we stop pulling new data immediately and mark your portal as uninstalled; we retain existing job records for a limited period in case you reinstall, after which they are deleted.

5. Your Rights & Data Deletion

You can request deletion of your portal's stored data at any time by emailing [email protected] from an email associated with your HubSpot account. Uninstalling the app from HubSpot immediately revokes DealReel's access token, preventing any further reads or writes to your portal.

6. Security

OAuth tokens are stored server-side and refreshed automatically before expiry; they are never exposed to the browser or logged in plain text. All traffic to and from DealReel is served over HTTPS.

7. Children's Privacy

DealReel is a business-to-business tool intended for use by sales organizations and is not directed at, or knowingly used by, children.

8. Changes to This Policy

If we make material changes to this policy, we will update the date at the top of this page and, where required, notify portal admins directly.

9. Contact

Questions about this policy or a specific data request: [email protected].