Privacy Policy

Last updated: March 8, 2026

1. Introduction

ProofFlow ("we", "us", "our") is a product of SaaSpirin LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our HubSpot application and website at proofflow.app.

2. Information We Collect

Account Information

When you install ProofFlow through HubSpot, we receive your HubSpot portal ID, user name, and email address via HubSpot's OAuth flow. We do not store your HubSpot password.

CRM Data

ProofFlow accesses contact names, email addresses, and company names from your HubSpot CRM to facilitate review requests. We also create and manage REVIEW app objects in your HubSpot portal.

Review Content

We store the text, video, and rating content submitted by your reviewers, along with their name, email, and company as provided during the review process.

Usage Data

We collect standard web analytics data (page views, feature usage) to improve the product. Our website uses Google Analytics via Google Tag Manager.

3. How We Use Your Information

  • To provide and maintain the ProofFlow service
  • To send review requests on your behalf
  • To sync review data to your HubSpot CRM as REVIEW app objects
  • To generate embeddable testimonial widgets for your website
  • To communicate service updates and respond to support requests

4. Data Sharing

We do not sell your data. We share information only with:

  • HubSpot — to sync review data back to your CRM (one-way sync from ProofFlow to HubSpot)
  • Infrastructure providers — for hosting, storage, and email delivery (e.g., Hetzner, AWS S3, Postmark)

5. Data Retention

We retain your data for as long as your account is active. Upon account deletion or HubSpot app uninstallation, we delete your data within 30 days. Review content associated with published widgets is retained until you explicitly unpublish or delete it.

6. GDPR and Data Subject Rights

We support HubSpot's GDPR compliance features, including the contact.privacyDeletion webhook. When a contact requests deletion through HubSpot, we automatically anonymize their personal information across all associated reviews.

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing of your data
  • Data portability

To exercise these rights, contact us at hello@proofflow.app.

7. Security

We use encryption in transit (TLS) and at rest for sensitive data including HubSpot OAuth tokens. Access to production systems is restricted and audited.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the HubSpot app.

9. Contact Us

If you have questions about this Privacy Policy, contact us at:
hello@proofflow.app
SaaSpirin LLC
1309 Coffeen Avenue STE 1200
Sheridan, Wyoming 82801