TL;DR: Your monday.com board data and HubSpot content never leave their respective platforms. The app accesses only HubSpot CRM objects — no emails, marketing tools, or website content. The only data we store is subscription metadata (plan, quota, account ID). The app runs on monday code's secure infrastructure with SOC 2, ISO 27001, HIPAA, and GDPR compliance.
Our approach: trust is everything
Trusting a third-party vendor with sensitive CRM and work data is a real decision — and we don't take it lightly. At Fantasy Media, we've built HubSpot Integration Plus around a simple commitment: your data stays within monday.com and HubSpot's secure environments.
The sections below answer the questions IT and security teams ask most often — exactly what we access, how it's protected, where it runs, and what happens if you ever decide to leave.
What data does the app access?
From HubSpot: CRM objects only — Contacts, Companies, Deals, Tickets and Tasks. The app does not access your emails, marketing tools, workflows, website content, or any other HubSpot data.
From monday.com: board structure and column values needed to create and update items during sync.
No HubSpot record content or monday.com board data is stored on our servers.
Does the app store any of my data?
No board, item, or HubSpot record content is stored on our end.
The only data we store is subscription metadata:
Billing cycle start and end dates
Remaining action quota
Account ID, account name, and the email of the user who installed the app
This metadata is stored within monday code's managed infrastructure and logically partitioned by account ID — ensuring each customer's information remains separate.
How are HubSpot authentication tokens handled?
Tokens are the secure keys that let the app access your HubSpot account on your behalf. We handle them in two ways:
Short-lived tokens — we use monday.com's short-lived authentication tokens, ensuring customer data stays within the monday.com environment.
Secure vault storage — when tokens need to persist, they're kept in monday code's secure vault, which has the same security standards as monday.com itself.
We never store authentication tokens on our own servers.
Do you log any of my data?
No. We do not log details of your boards, items, columns, or HubSpot record content. Runtime logs are kept in monday code's managed logging service and contain only non-customer identifiers (account ID, user ID, board ID).
Is my data encrypted?
Yes — both in transit and at rest.
In transit: all data is transmitted over TLS
At rest: subscription metadata is encrypted within monday code's managed storage
Where is the app hosted?
HubSpot Integration Plus is hosted on monday code — monday.com's native app-hosting infrastructure. We do not run our own servers or data centers.
monday code servers are located in the US.
Apps hosted on monday code comply with enterprise-level compliance and security standards:
Yes. HubSpot Integration Plus passed monday.com's security and compliance review before being approved on the Marketplace. The review covers OAuth permissions, data handling, and privacy policy.
How is billing handled?
All payments are processed through monday.com's native billing system — there's no separate vendor to approve. Since you already pay through monday.com, your payment information is never shared with us.
What happens to my data if I uninstall the app?
Uninstalling immediately:
Revokes the app's access to your monday.com account and HubSpot