Security

• Read-only by design. HubSpot tokens need only crm.objects.deals.read and crm.objects.owners.read. For Pipedrive we only call read (GET) endpoints.
• Encrypted tokens. CRM tokens are encrypted with AES-256-GCM before storage; the key is held separately as a server environment secret. Tokens are never shown back to you or sent to the browser.
• Minimal data. We store open-deal fields needed to compare weeks, nothing else from your CRM.
• Private storage. Data lives in a private Vercel Blob store that is not publicly readable.
• Passwords are hashed with scrypt and a per-user salt. Sessions use signed, HTTP-only, secure cookies.
• Payments are processed by Stripe; card details never touch our servers.
• Deletion. Cancelling or deleting your account removes your token, snapshots and briefs.

Found a security issue? Email hello@usemondaybrief.com.