How Fold works/Integrations/HubSpot

CRM & Sales

HubSpot

CRM pipeline health, closed-won revenue and new contact growth — read-only via OAuth.

OAuth 2.0 — no password sharedRead-only — we never write to your accountGDPR compliant

Your password is never shared

We never sell your data

Disconnect = data deleted instantly

Why founders connect HubSpot

If you're running a sales-led or product-led motion, your CRM is where revenue actually closes — but checking HubSpot daily just to see if you're on track is friction. Fold surfaces your closed-won revenue, pipeline value, and new-contact growth next to your marketing and product metrics, so you can see whether your top-of-funnel activity is actually converting.

How your data flows

From HubSpot to your Fold dashboard

This is the exact sequence every time Fold runs its daily sync. Nothing runs outside this pipeline.

HubSpot API

OAuth 2.0 token

You authorise Fold once via HubSpot's own OAuth page. Fold receives a scoped, time-limited token — your login credentials are never seen or stored.

Read-only API requests

4 HTTP GET calls per sync

Fold makes 4 read-only requests to HubSpot's API — the exact endpoints are documented in the section below. No write requests are ever made.

Filter & aggregate

Personal data stripped before storage

The raw API response is processed in memory. Only aggregate numbers (totals, counts, rates) are extracted. Any field containing personal information — names, emails, IDs — is discarded and never written to disk.

Stored in your account

AES-256 at rest · row-level isolation

The filtered snapshot is written to your isolated tenant in our database, encrypted at rest. Row-level security ensures no other Fold user can read your data — not even via a misconfigured query.

Shown in your dashboard

Overview · Analytics · AI Digest

The stored aggregate numbers surface across your Fold dashboard — the Overview tile, Analytics tab charts, and the AI-generated daily digest. No raw data from the API is ever returned to the frontend.

Step 1 — How you connect

The exact connection flow

Here is precisely what happens when you connect HubSpot to Fold, step by step.

1Click "Connect HubSpot" in your Fold Settings tab.
2You're redirected to HubSpot's OAuth authorization page (app.hubspot.com).
3You select the HubSpot account (portal) you want to connect — useful if you manage multiple.
4You review the exact permissions Fold is requesting and click 'Grant access'.
5HubSpot issues a scoped OAuth token to Fold. Your login credentials are never shared.
6Fold performs the initial sync and your CRM metrics appear in the dashboard.

Step 2 — Permissions we request

Exactly what access Fold asks for

We request the minimum permissions needed. No more.

crm.objects.deals.read — read deal records: stage, amount, close date, owner ID.
crm.objects.contacts.read — read contact records: creation date and lifecycle stage only. No personal details stored.
crm.schemas.deals.read — read the deal pipeline and stage configuration to calculate pipeline value correctly.
No write scopes requested. Fold cannot create, update, or delete any HubSpot records.

Step 3 — API calls Fold makes

Every request we send to HubSpot

These are the exact API endpoints Fold calls during each sync, and why.

POST /crm/v3/objects/deals/search (closed-won, date-filtered)

Count deals closed-won on a given day and sum their revenue (amount field).

POST /crm/v3/objects/deals/search (open deals, all stages)

Sum the amount field of all open deals to calculate live pipeline value.

GET /crm/v3/objects/contacts?createdAfter={date}

Count net-new contacts created on a given day. Contact names and emails are never extracted.

GET /crm/v3/pipelines/deals

Read pipeline stage names to label the pipeline value breakdown correctly.

API impact: Fold makes 4 API calls per sync using HubSpot's search API with date filters. This is negligible relative to HubSpot's 100 requests/10s rate limit and does not affect your portal's performance.

What we store

Exactly what lands in our database

Every field we persist — with a real example and the reason it exists. Nothing more is stored.

Field	Example value	Why we store it
Deals closed-won (day)	4 deals on 2025-04-23	Daily sales velocity metric.
Closed-won revenue (day)	$12,400 on 2025-04-23	Daily CRM revenue KPI tile.
Open pipeline value	$84,200 in pipeline	Pipeline health widget.
New contacts created (day)	18 new contacts	Top-of-funnel growth metric.
Win rate (rolling 30 days)	34%	Sales efficiency KPI.

What a daily sync actually stores

One day's record — verbatim

This is a real-looking example of the row Fold writes to your account after a single sync. Every field, every value — nothing hidden.

hubspot_daily_snapshot

{

"date": "2025-04-23",

"deals_closed_won": "4",

"closed_revenue": "12400.00",

"pipeline_value": "84200.00",

"new_contacts": "18",

"win_rate_30d": "34.0",

}

No customer names. No emails. No transaction IDs. Just numbers.

What we never store

Data Fold never touches

These fields are explicitly excluded. Even if the HubSpot API returns them, Fold ignores and discards them before any storage step.

Contact names, email addresses, phone numbers or company names
Deal notes, activity logs or email threads
Individual contact or deal IDs
Meeting transcripts or call recordings
Association data (which contact is linked to which company)
Your HubSpot portal ID or API key

What Fold never does

Hard limits — enforced at the API level

These aren't just policies — they're technically impossible given the permissions we request. HubSpot's own API enforces them.

Create, update or delete deals, contacts, companies or activities
Send emails or enroll contacts in sequences
Modify pipeline stages or deal properties
Access your HubSpot billing or account settings
Share your CRM data with any third party
Use your CRM data to train AI models

Privacy note — HubSpot specific

HubSpot stores significant personal data about your contacts and prospects. Fold is designed to read none of it — we only extract count and sum aggregates. Contact names, emails, company details and activity history are never extracted or stored by Fold.

Data retention

How long we keep it

Synced CRM snapshots are retained while your Fold account is active and purged within 24 hours of disconnecting or account deletion.

Refresh frequency

How often we sync

Automatic sync every 24 hours (yesterday's data). Manual refresh available from Settings.

How to revoke access

You are always in control

You can disconnect HubSpot from Fold at any time — from either side. Both options immediately stop all data access.

From Fold

Settings → HubSpot → Disconnect. All synced HubSpot data is deleted immediately.

From HubSpot directly

HubSpot → Settings → Integrations → Connected Apps → Fold Analytics → Uninstall.

Open HubSpot settings

Security standards

How your credentials are protected

AES-256 encryption at rest

Your OAuth access token is encrypted with AES-256 before being written to our database. It is never stored in plaintext.

TLS 1.3 in transit

All API calls from Fold to HubSpot use TLS 1.3. Your credentials cannot be intercepted in transit.

Read-only enforcement

HubSpot's own API enforces the read-only permissions server-side. Even if Fold's code had a bug, the platform would reject any write request.

Row-level security

Your synced data is isolated in our database with row-level security. No other Fold user can query your data.

FAQ

Questions about the HubSpot integration

Can Fold see my contacts' names or email addresses?

No. We count new contacts created per day (the number 18, not who those 18 people are). Contact names, emails and phone numbers are never extracted or stored.

Can Fold see the notes or emails I have logged against deals?

No. We only read the deal amount, close date, and stage from the deal record. Notes, activity logs, email threads and meeting data are never accessed.

I use HubSpot for both marketing and sales. Does Fold access the marketing side?

No. We only request CRM scopes (deals and contacts). Marketing Hub data — emails, landing pages, workflows, social posts — is not accessible with the scopes we request.

What happens to my HubSpot data if I cancel my Fold subscription?

All synced data is deleted from Fold's servers within 24 hours of account closure. Disconnecting HubSpot from Settings → HubSpot → Disconnect will trigger immediate deletion.

Other live integrations