---
title: Privacy policy | Kitiquette
description: "How Kitiquette handles personal data: our website, support and billing, and the data the Kitiquette app for HubSpot works with."
image: https://www.kitiquette.com/hubfs/raw_assets/public/kitiquette-theme/images/social-card.e4374264.png
---

[Skip to content](https://www.kitiquette.com/privacy#main)

[![](https://www.kitiquette.com/hubfs/raw_assets/public/kitiquette-theme/images/logo.a96e9f7a.svg) Kitiquette](https://www.kitiquette.com/?hsLang=en)

Menu

[Pricing](https://www.kitiquette.com/pricing?hsLang=en) [Setup guide](https://www.kitiquette.com/setup-guide?hsLang=en) [FAQ](https://www.kitiquette.com/faq?hsLang=en) [Support](https://www.kitiquette.com/support?hsLang=en) [Start free trial](https://www.kitiquette.com/trial?hsLang=en) 

[Start free trial](https://www.kitiquette.com/trial?hsLang=en)

# Privacy policy

Effective date: 25 October 2026

## Who we are

This policy explains how Kitiquette ("we", "us"), of 1617 Laura Rd, River Oaks, TX 76114, USA, handles personal data in connection with our website https://www.kitiquette.com, our customer support and billing, and the Kitiquette app for HubSpot (the "App"). Questions: [support@kitiquette.com](mailto:support@kitiquette.com).

## Two roles: controller and processor

For our website, support and billing, we decide how personal data is used, so we are the "controller". Inside the App, we process data from our customers' HubSpot accounts only to provide the App, on our customers' instructions; for that data our customer is the controller and we are their "processor". Our [Data Processing Agreement](https://www.kitiquette.com/dpa?hsLang=en) governs that processing. If you are a member of a customer's team and have a question about data in your company's HubSpot account, please contact your company first.

## What we collect and why

| Who | Data | Purpose | Legal basis (GDPR) |
| --- | --- | --- | --- |
| Website visitors | Pages visited, device and browser information, approximate location, cookie identifiers (through our website platform, HubSpot) | Run and improve the website; measure interest | Consent for non-essential cookies; legitimate interests for essential operation |
| People who contact us | Name, email, company, the content of your message | Answer questions and provide support | Legitimate interests; contract where you are a customer |
| Customers (billing) | Name, email, company, billing address, plan and invoice history. Card details are handled by Stripe; we do not see or store full card numbers. | Billing, accounting, tax | Contract; legal obligation (tax records) |
| App users (customer staff) | See "Data in the App" below | Provide the App | Processed for the customer under the Data Processing Agreement |

## Data in the App

When a customer installs the App, HubSpot gives it access to that customer's products, deals, line items, deal owners, users and currency settings. The App uses this access to show the configurator on deals, check who may add to a deal, and create line items. Specifically:

- Product, deal and line-item data passes through our server in memory to answer each request. A product list may be held in memory for up to 30 seconds to keep the App fast. We do not store CRM records on our servers.
- Deal owner and user records (which can include a name and email address) are read only to check permissions (deal owner or team member; super admin for settings). They are not stored.
- HubSpot sends the user's HubSpot user ID and email address with each request from the App. We do not use or store the email address; our server logs record only the HubSpot account ID and error messages, and are deleted after 3 days.
- An unfinished cart is saved in the customer's own HubSpot account (a hidden deal property), not on our servers.
- Discount approval requests are also kept on the deal in the customer's HubSpot account: the build, the discount asked for, the HubSpot user IDs of the rep who asked and the super admin who decided, and when. They are removed when the build is added to the deal or taken out of the cart.
- The discount approvers a customer names are kept in the customer's own HubSpot account (as the options of a hidden deal property: their HubSpot user ID, name and email). When a rep asks for an approval, the App emails those approvers (or the account's super admins) through Cloudflare's email service, and emails the rep when it's decided. The emails hold the deal name, the product, the discount and a link to the deal; we don't keep copies.
- The builds added to a deal (the product, the choices, the discount and the IDs of the line items made) are kept on that deal in the customer's HubSpot account, so they can be edited or removed later.
- To apply our plans' rep limits, we keep, for each customer account and month, a list of one-way coded versions (a keyed hash) of the HubSpot user IDs of people who added a build to a cart or deal. It cannot be turned back into a user ID, holds no names or emails, and is deleted after about 70 days.
- The access token HubSpot issues for the customer's account is stored encrypted (AES-GCM). It is deleted at once when the App is uninstalled from its settings page; if the App is uninstalled from HubSpot instead, HubSpot revokes the token and our encrypted copy is deleted the next time it is used.

## Who we share data with

We do not sell personal data. We use these service providers, each bound by data protection terms:

- Cloudflare, Inc.: hosts the App's server, stores encrypted access tokens, routes email sent to our domain, and sends the App's approval emails.
- HubSpot, Inc.: hosts our website and the HubSpot accounts the App works with.
- Stripe, Inc.: payment processing and invoicing.
- Google LLC: our email (Gmail).

We may disclose data where the law requires it, to protect our rights, or as part of a sale or reorganisation of the business, with notice to you.

## International transfers

Our providers process data in the United States and other countries. Where personal data from the European Economic Area, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses, as offered by each provider.

## How long we keep data

| Data | Kept for |
| --- | --- |
| Support emails | 3 years after the last contact |
| Billing and invoice records | 7 years, or longer if tax law requires |
| App access tokens | Until the App is uninstalled or HubSpot revokes access |
| App server logs | 3 days |
| Monthly rep counts (coded user IDs) | About 70 days |
| Website analytics | Cookies expire after at most 13 months; visit records are deleted from our HubSpot account after 3 years |

## Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, to data portability, and to withdraw consent at any time. To use these rights, email [support@kitiquette.com](mailto:support@kitiquette.com). We will reply within one month. If your request concerns data in a customer's HubSpot account, we will pass it to that customer and help them answer it. You can also complain to your data protection authority.

California residents: we do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information. You may ask us what personal information we hold about you and ask us to correct or delete it, by email as above; we will not treat you differently for doing so.

## Cookies

Our website uses cookies set by our website platform (HubSpot). Non-essential cookies are used only with your consent, which you can change at any time through the cookie banner. The App itself does not set cookies.

## Security

We encrypt access tokens at rest, verify HubSpot's signature on every request to our server, use HTTPS throughout, keep each customer's data separate, and limit logging to what we need to fix problems.

## Children

Our services are for businesses and are not directed at children.

## Changes

We will post changes here and update the effective date. For significant changes we will notify customers by email.

## Contact

Kitiquette, 1617 Laura Rd, River Oaks, TX 76114, USA. Email: [support@kitiquette.com](mailto:support@kitiquette.com). See also our [Security](https://www.kitiquette.com/security?hsLang=en) page and [Data Processing Agreement](https://www.kitiquette.com/dpa?hsLang=en).

**Kitiquette**: good manners for your product kits. Product configurator for HubSpot Sales Hub Starter, Professional and Enterprise.

- [Start a trial](https://www.kitiquette.com/trial?hsLang=en)
- [Pricing](https://www.kitiquette.com/pricing?hsLang=en)
- [Setup guide](https://www.kitiquette.com/setup-guide?hsLang=en)
- [FAQ](https://www.kitiquette.com/faq?hsLang=en)
- [Support](https://www.kitiquette.com/support?hsLang=en)
- [Compare with HubSpot quote rules](https://www.kitiquette.com/compare/hubspot-quote-rules?hsLang=en)
- [Privacy](https://www.kitiquette.com/privacy?hsLang=en)
- [Terms](https://www.kitiquette.com/terms?hsLang=en)
- [Security](https://www.kitiquette.com/security?hsLang=en)
- [DPA](https://www.kitiquette.com/dpa?hsLang=en)
- Cookie settings
- [support@kitiquette.com](mailto:support@kitiquette.com)

© 2026 Kitiquette. HubSpot is a trademark of HubSpot, Inc. Kitiquette is an independent app and is not affiliated with HubSpot.