Privacy & Data Protection

Privacy Policy

How we collect, use, and protect your personal data in compliance with GDPR and global privacy standards.

Last updated: March 24, 2026

Privacy at a Glance

We process your CSV data in-memory only - no permanent file storage

Your data is sent directly to your HubSpot account - we don't store contact lists

Integration tokens are encrypted and automatically cleaned up

You can delete all your data anytime in settings

What Data We Collect

Account Information

• Email address and display name (from Firebase Auth)
• Account creation date and last login time
• Subscription plan and preferences

CSV Processing Data

• CSV file contents (processed in-memory, not stored)
• Column mappings and transformation settings
• Import history and processing results

Integration Data

• HubSpot OAuth tokens (encrypted)
• Integration settings and preferences
• Connection status and portal information

How We Use Your Data

Service

Provide CSV processing and HubSpot import functionality

Legal basis: Contract performance and legitimate interest

Security

Maintain account security and prevent unauthorized access

Legal basis: Legitimate interest and legal obligation

Support

Provide customer support and troubleshooting

Legal basis: Contract performance and legitimate interest

Improve

Improve our service and develop new features

Legal basis: Legitimate interest

Data Retention

We retain your data for the following periods:

Account Data

2 years

Required for account functionality

Import History

3 months

Processing history and logs

Temporary Files

1 day

Processing cache and temp data

Integration Tokens

6 months

HubSpot connection tokens

Your Privacy Rights

Right to Erasure

Delete all your personal data anytime in your account settings

Data Portability

Request a copy of all your personal data (coming soon)

Access & Rectification

View and update your personal information in account settings

Object to Processing

Security & Data Sharing

Security Measures

• All data transmitted over HTTPS/TLS encryption
• Integration tokens encrypted with AES-level security
• Firebase security rules enforce user data isolation
• Regular security audits and monitoring

Data Sharing

We do not sell or share your personal data with third parties. Your CSV data is sent directly to your connected HubSpot account under your control. We use trusted service providers:

• Firebase/Google Cloud - Authentication and database hosting
• HubSpot - Direct integration (your account only)
• Vercel - Application hosting and infrastructure

If you have any questions about this privacy policy or your personal data, please contact us:

Email: privacy@emport.io

Response Time: Within 30 days (as required by GDPR)

Data Protection: We are committed to resolving any privacy concerns promptly

Changes to this Policy: We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Back to Home