What we do with your data

Here’s the short version, in plain English: FolioPDF doesn’t store the contents of your CRM records. Every time someone makes a PDF, we fetch the latest information from your HubSpot account, build the PDF, send it back into HubSpot, and let go of the property values.

That’s not a footnote. It’s how the product is built on purpose.

What we keep

The things we hold onto are:

• A secure connection to your HubSpot account. OAuth tokens are encrypted at rest with AES-256-GCM and used only to read the records you generate PDFs from.
• Your branding settings (logo URL, theme, brand color, company name, folder path).
• A small cache of your CRM property metadata — names and types of properties, NOT their values. This powers the editor’s field picker without re-fetching from HubSpot on every page load. Refreshed daily and on demand.
• A short audit log of which PDFs were made. Just metadata: which template, which record (object type + record ID), when it was made, and whether it succeeded. We use this so your team can see the history in the FolioPDF card and so we can troubleshoot failed generates.
• Your billing state. Plan tier, monthly usage counter, cycle start/end. Required to enforce your plan’s PDF cap and process upgrades.

What we don’t keep

We don’t keep:

• The values of your deals, contacts, companies, or quotes — only the property names exist in our schema cache, never the values
• The contents of any PDF after it’s been delivered to HubSpot
• Any list of your customers’ personal data
• Marketing-style profiles of your end customers

Every time someone clicks Generate, we ask HubSpot for the property values we need, build the PDF, hand it to HubSpot, and let go of the values.

Why we built it this way

Most apps in the marketplace copy your CRM data and keep it on their own servers, then sync it. We don’t. It means there’s nothing for us to leak, nothing to update when your data changes, and nothing extra to delete if you leave.

It’s the boring, careful, least-data approach, and it’s deliberate.

What happens when you uninstall

When you remove FolioPDF from your HubSpot account:

1. The connection between FolioPDF and your HubSpot account is cut immediately. HubSpot revokes our OAuth tokens at the same time, so we can no longer read anything from your account.
2. Your branding settings, document metadata, and audit log remain on our side until you request deletion. To request deletion, email support@foliopdf.dev with your HubSpot account ID and we will purge your data within 30 days.

PDFs already generated stay in your HubSpot Files library — they belong to you, not to us.

See Removing FolioPDF for the click-by-click steps.

Where the PDFs themselves live

PDFs are stored in your HubSpot account, not on our servers. They live both as a note on the record and in the HubSpot Files library. They’re yours, in your CRM, where you can find them.

Questions?

Email us at support@foliopdf.dev. We’ll answer in plain English.