Privacy

Pronova connects Claude to your HubSpot portal. This page states what it handles and what it keeps.

CRM data

• Pronova processes your CRM data in transit only. Records that Claude reads pass through Pronova to Claude. Pronova does not keep them.
• Pronova runs no analytics on record contents.

What Pronova stores

• Sign-in tokens. Pronova stores your HubSpot access and refresh tokens encrypted. It uses them only to act for you through the tools you approve. It keeps them until you disconnect or HubSpot revokes the install. The tokens Pronova issues to Claude last at most 25 minutes (access) and 30 days (refresh).
• Account identifiers. Pronova builds your sign-in id from your HubSpot account (portal) id and user id. It stores that id with your connection and as the prefix on everything it stores for you, so your data stays apart from other users' data. HubSpot's sign-in response includes your email address. Pronova does not store or log it.
• Pending changes. Pronova keeps a change you have not applied for 24 hours, then deletes it.
• Approval records. When you approve or decline a change on the approval page, Pronova keeps that decision. An approval lasts 15 minutes and a decline 24 hours. Pronova also keeps a short record of which HubSpot account opened the page, for 10 minutes or until you press a button (15 minutes for the approvals list). Disconnect deletes the approval records.
• Sign-in flow records. While you go through HubSpot to disconnect or approve, Pronova keeps a record of that step for 10 minutes, and deletes it on first use.
• Undo snapshots. Pronova keeps the previous values of a record it changed for 7 days, then deletes them.
• Audit entries. Each entry records that a change happened. Pronova stops using it after 7 days and deletes it within 14 days.

Pronova's logs keep the route, the status code, a fixed error code, the tool name and the name of the app that sent the request (such as Claude Code). They hold no request bodies, tokens or record data. Cloudflare keeps these logs for 7 days, then deletes them.

How Pronova uses your data

Pronova uses what it stores only to answer your requests in Claude and to apply the changes you approve. It runs no analytics on record contents. Pronova does not sell your data and does not use it to train AI models.

Who else handles your data

• HubSpot. Pronova reads and changes your portal through HubSpot's API, with your token.
• Claude. Records that Claude reads pass through Pronova to Claude so it can answer you. What Anthropic does with them is covered by Anthropic's own terms and privacy policy for your Claude plan.
• Cloudflare. Pronova runs on Cloudflare Workers and a Cloudflare container. Cloudflare also holds the encrypted sign-in tokens.
• Upstash. Pronova stores pending changes, undo snapshots, audit entries and approval records, encrypted, in Upstash Redis in the EU.

Pronova sends your data to no one else.

Disconnect and delete

Open /disconnect to end your connection. Pronova sends you through HubSpot once more to confirm it is you, then removes your Claude grants, revokes your HubSpot tokens and deletes your pending changes, approval records, undo snapshots and audit entries.

Disconnecting does not uninstall the app in HubSpot. Uninstalling is a separate step in HubSpot, and HubSpot emails your portal admins when someone does it.

Questions

Support: hey@pronovahq.com. Send privacy questions and security reports to the same address. Leave customer data and tokens out of your message.