The short version: PipeChamp reads your HubSpot CRM data — read-only — to generate pipeline analytics. We display it to you, we do not sell it, and we do not store your contact or deal records. Only monthly aggregate scores (not individual records) are stored, to show you trends over time. We use a few trusted services (like Stripe for billing and PostHog for product analytics), listed below.
PipeChamp ("we", "us", "our") is a pipeline analytics application that connects to HubSpot CRM and analyses deal and contact data to generate pipeline health scores and insights. PipeChamp is operated as an independent product and is not affiliated with HubSpot, Inc.
For privacy questions, contact us at: support@pipechamp.app
When you authorise PipeChamp via HubSpot OAuth, we request the following read-only permissions:
Every scope we request is read-only: PipeChamp cannot create, edit, or delete anything in your HubSpot account. We access only what is necessary for the analytics features you use, and we do not access email content, notes, attachments, or any data not listed above.
HubSpot data is fetched, processed in memory, and returned to your browser as pipeline metrics and scores. This processing happens on our servers (hosted on Railway) and the results are displayed directly to you.
To avoid repeated API calls and respect HubSpot rate limits, fetched data is cached in server memory for up to 5 minutes per session. This cache is keyed to your HubSpot access token and is discarded when the cache expires or the server restarts.
We store one aggregate record per HubSpot portal per month in a secure database. This record contains only computed scores (e.g. overall grade, win rate percentage, speed-to-lead average) — never individual contact names, email addresses, deal names, or other personally identifiable information from your CRM.
These snapshots power the month-over-month trend feature. They can be deleted upon request.
PipeChamp includes an AI assistant ("PipeCoach"). When you ask PipeCoach a question, the question you type along with relevant pipeline context (such as aggregate funnel metrics) is sent to our AI provider, Anthropic, to generate a response. This data is used only to answer you — it is not used to train AI models. Please avoid pasting sensitive personal information into PipeCoach.
If you choose to connect Google Analytics 4 or Google Search Console, we access those APIs under separate Google OAuth authorisation. The same principles apply: data is processed in memory, displayed to you, and not stored or sold. These integrations are optional and can be disconnected at any time.
We rely on a small number of trusted providers ("subprocessors") to operate PipeChamp. Each receives only the data needed for its function:
We use one essential cookie to keep you signed in (it stores your PipeChamp session). We also use analytics to understand how the product and website are used:
Depending on where you are located, you may have the following rights:
To exercise any of these rights, email support@pipechamp.app.
OAuth tokens are stored in a server-signed session cookie and, where applicable, in our access-controlled database; they are never exposed in URLs. Infrastructure is hosted on Railway and Vercel with TLS encryption in transit. We do not log HubSpot record content.
PipeChamp is a B2B business tool and is not directed at children under 16. We do not knowingly collect data from anyone under 16.
If we make material changes to how we handle your data, we will update the effective date at the top of this page and, where appropriate, notify connected users by email.
For any privacy questions or to exercise your rights: support@pipechamp.app