Termline (staging) is operated by Freesoul Games (“we”). This policy explains what we process when you install the app in HubSpot, sign in to the dashboard or visit this website.
Our role
For the CRM data we read from your HubSpot portal, we act as a processor on behalf of the business that installed the app, which remains the controller. For the website and dashboard sign-in, we are the controller.
What we process
- Installation data: your HubSpot portal ID, company currency and HubSpot domain, and the OAuth access and refresh tokens HubSpot issues to the app. Tokens are encrypted at rest with AES-256-GCM.
- CRM data needed for the calculation: company names and domains; deal names, close dates and stages; and line-item names, SKUs, recurring amounts and billing dates. We store the company name and domain, the computed figures, the contract window of each recurring line item and a history of MRR changes. We do not store contacts, emails, notes or other CRM records.
- Dashboard users: the email address and HubSpot user ID of people who sign in, and when they signed in.
- Technical data: application logs, which hold record IDs and error messages but not your CRM content. Network infrastructure processes IP addresses to deliver and protect the service.
Why we process it
Only to provide the service: calculating MRR and ARR, writing the results back to your HubSpot portal, showing them in the dashboard, and supporting you. The legal basis is the performance of our contract with you and our legitimate interest in operating a secure service. We do not sell data, run advertising or train machine-learning models on your data.
Cookies and storage
We set one strictly necessary cookie, mrr_session, when you sign in. It keeps you signed in for up to 14 days. The website remembers your colour-theme choice in your browser's local storage. We use no analytics or tracking cookies.
Emails
We email the people who install the app or sign in to the dashboard, using the email address HubSpot provides: a welcome message, a note when your first import is finished, and a weekly revenue summary. The weekly summary can be turned off in Settings or with the unsubscribe link in every summary. We do not send marketing email.
Website analytics
We measure how the website and dashboard are used with Umami, an open-source analytics tool that we host ourselves on the same servers in Germany. It sets no cookies and does not track you across websites. For each page view it records the page address (with customer record IDs removed), the referring site, browser, operating system, device type, screen size, language and country. Your IP address is used only to derive the country and to count unique visitors with an anonymous identifier, and is not stored. We also record a few product events, such as button clicks and completed installations, without personal data. If your browser sends a Do Not Track signal, we do not measure your visits.
Where data is stored
Data is stored in the European Union on servers operated by Hetzner Online GmbH in Germany. Traffic passes through Cloudflare, Inc. for DNS, TLS and protection against attacks.
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Hosting, database and self-hosted analytics | Germany |
| Cloudflare, Inc. | DNS, content delivery and security | Global network |
| HubSpot, Inc. | Source of CRM data and sign-in (your own provider) | Per your HubSpot data hosting |
Retention
We keep installation and calculation data while the app is installed. You can delete it at any time from Settings → Delete data and disconnect in the dashboard, which removes it from the live database immediately. If you uninstall the app in HubSpot, we detect that our access was revoked, stop processing at once and delete your data 30 days later (so an accidental uninstall can be undone by installing again). You can also ask us by email. Encrypted database backups are kept for up to 30 days and then deleted.
Security
All traffic is encrypted with TLS. OAuth tokens are encrypted at rest, requests from HubSpot are verified with HubSpot's request signatures, and the database accepts connections only from the application server.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict its processing. For CRM data, please contact the business that installed the app; we will help them respond. You can reach us at support@termline.io, and you may complain to your data protection authority.
Changes
We will post changes here and update the date above. Material changes will be announced in the dashboard.
Contact
Freesoul Games · support@termline.io