Privacy Policy

YTI Sync for Intercom ("the App") is a HubSpot app by YTI Digital OÜ, Estonia ("we"). It copies Intercom conversations and tickets to HubSpot and HubSpot contact fields to Intercom, for the HubSpot account and Intercom workspace that installed it. Contact: support@yti.digital.

For the customer data in your HubSpot account and Intercom workspace, you (your organisation) are the controller and we are your processor: we process it only to run the App as you configure it. For the account and billing details of your own company, we are the controller.

What the App processes but does not store

• Conversation messages, ticket titles and descriptions, and the names, emails and phone numbers of your customers. They are read from Intercom at the moment a conversation or ticket syncs and written to your HubSpot account.
• The values of the HubSpot contact fields you choose, copied to Intercom (Pro plan).

What the App stores

• Connection: your HubSpot account ID, the Intercom workspace ID, name and region, and OAuth tokens for both, encrypted with AES-256-GCM.
• Settings and plan, and the Stripe customer and subscription IDs if you pay.
• Links: the IDs of Intercom conversations and tickets and of the HubSpot notes and tickets made from them, with a hash of the last write.
• Queue and log: IDs waiting to sync, what happened to each, and error texts from HubSpot or Intercom with email addresses masked. No message text.
• Usage: the number of conversations logged each month.
• Support: e-mails you send us, in our mailbox.

Where it runs, and who else is involved

• Hetzner Online GmbH hosts our server in Falkenstein, Germany. What the App stores stays in the EU.
• Stripe handles payments, invoices and VAT; we never see card numbers. Stripe's privacy policy applies to what you enter on its pages.
• Zoho hosts our support mailbox in its EU data centre.
• Cloudflare provides DNS for our domain; it does not carry App traffic.
• HubSpot and Intercom are your own services: the App reads from and writes to them on your behalf, under your agreements with them. Your Intercom workspace may be hosted in the US, the EU or Australia.

We use no AI services, analytics or advertising trackers in the App, and we do not sell or share data. Where data from your Intercom workspace in the US or Australia reaches our server in Germany, that transfer happens because you connected it.

Security

• HTTPS only; every webhook and every request from the HubSpot settings page is verified by its signature.
• Tokens are encrypted at rest, with the key kept outside the database.
• Access to the server and the database is limited to YTI Digital.

Retention and deletion

• Sync log: 90 days. Finished queue items: 14 days. Webhook receipts: 7 days.
• When you disconnect Intercom, its token is deleted at once.
• When you uninstall the App from HubSpot, everything we hold for that account is deleted 30 days later (a reinstall within 30 days continues where it stopped).
• Billing records are kept by Stripe and by us as Estonian accounting law requires (7 years).
• Notes and tickets the App wrote are your HubSpot records and stay there until you delete them.

Your rights

Write to support@yti.digital to get a copy of what we hold for your account, to correct it, or to have it deleted at once. For requests from your own customers about their data in HubSpot or Intercom, you handle them in those services; the App holds none of their personal data. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

Changes

We will update this page before releasing a version that stores or sends data differently.