Privacy policy

Last updated October 22, 2026

This explains what Gold Standard Web LLC (“CrewPipe”, “we”) handles when a company connects its Jobber and HubSpot accounts, why, how long we keep it, and how to have it deleted. Short version: we move data between your two accounts, we keep as little of it as we can, we don't sell anything, and you can have it all deleted.

Who is who

• Our customer is the company that connects Jobber and HubSpot (the owner and office staff who sign in).
• Your customers and leads (the people in your Jobber clients and HubSpot contacts) never sign up with us. We handle their details only on your behalf and on your instructions, as your service provider (a “processor”). You stay responsible for telling them how you use their information.

What passes through CrewPipe

To keep the two accounts in step, CrewPipe reads records from one side and writes them to the other. Depending on what you turn on, that includes:

• Jobber: clients (names, company names, emails, phones, billing and property addresses, tags and custom fields), requests, quotes, jobs and invoices (titles, statuses, dates, totals, paid status).
• HubSpot: contacts, companies and deals (the same kinds of fields), deal pipelines and stages, lead source and UTM properties, and the “Jobber” properties CrewPipe adds.

These details are read, compared and written in memory while a sync runs. We do not keep a copy of names, emails, phone numbers, addresses, notes or message bodies. They stay in Jobber and HubSpot.

What we store

• Links between records: the Jobber id and HubSpot id of each matched pair, plus fingerprints (one-way hashes) of the synced values so we can tell what changed and avoid sending a change back where it came from.
• Statuses, dates, amounts and counts: deal stage, which Jobber request/quote/job/invoice belongs to which deal, totals, paid dates, and daily request counts.
• A sync log: what changed, which way, when, which field names, and whether it worked. The log shows a short label for each record, never an email or phone number.
• Review items: when two records might be the same person, we keep the ids and a short label for each so you can choose.
• Your settings: field and stage mappings, directions, and other choices you make.
• Sign-in tokens for Jobber and HubSpot, encrypted (AES-256-GCM). The email addresses of people who sign in to CrewPipe. Sign-in links are stored only as a one-way fingerprint.
• Billing: handled by Stripe. We keep the Stripe customer and subscription ids and status; we never see card numbers.
• Waitlist: if you joined it, the name, email, company and answers you gave us.
• Technical logs: request and error logs to keep the service running, with emails, phones, tokens and ids stripped. No advertising trackers.

How we use it

• To run the sync you set up, show you the log, and let you fix anything that needs a decision.
• To bill the subscription and answer support requests.

We don't sell data, use it for advertising, or contact your customers.

Who we share it with

Only the services we need to run CrewPipe, each under its own privacy terms:

• Jobber and HubSpot, when we read from and write to your accounts as you set up.
• Netlify (hosting and file storage for log exports), Neon (database).
• Resend (sign-in links and account emails), Stripe (payments).
• Sentry (error reports, with personal data removed), when error reporting is on.
• Anyone the law requires us to share with.

Disconnecting, uninstalling and deletion

• Disconnect or uninstall (from our Settings page, HubSpot's Connected Apps, or Jobber's App Marketplace): we delete that side's tokens straight away and stop syncing. Nothing in Jobber or HubSpot is deleted; records we created there stay yours.
• What we keep after that: the links, log and settings, for 90 days, so reconnecting picks up where you left off. After 90 days disconnected we delete them.
• Delete now: email us from the account owner's address and we'll delete the account and everything in it within 30 days. We keep only what the law requires (for example billing records at Stripe).
• Technical logs are kept for a short time (days to weeks) by our hosting provider.

Security

Tokens are encrypted, everything goes over HTTPS, and each company can only see its own data. See our security page.

Your choices

• Turn either sync direction, and any field, on or off in Settings.
• Disconnect either platform any time.
• Ask for a copy of your data, a correction, or deletion: hello@goldstandardweb.com.

Children

CrewPipe is for businesses and isn't meant for children.

Changes and contact

We'll email account owners about material changes to this policy. Questions or requests: hello@goldstandardweb.com