What Spriggit reads, writes and keeps

Read-only to start

The install requires read access only: contacts, companies and deals, their properties, and record owners. Every write permission is optional and can be declined at install, and Spriggit writes only through plans a person approves.

Changes only through plans

Every change Spriggit makes is a plan a person approves. Developer mode, the default, changes only sandbox, developer test and demo portals. A live portal changes only in live mode, which a person turns on in the web app with an authenticator app, for a set time. Deletes, invitations, raw API writes and workflows with webhooks or code are applied by a person in the web app.

A record of every change Spriggit makes

Each applied plan leaves a change record with what changed and how to undo it. Changes made directly in HubSpot show up in the portal’s activity as outside changes.

Record values and AI

Whether record values may go into AI prompts is the client’s setting, and only the client’s admin can loosen it, with a second sign-in step. Audit checks that use AI run only when it allows them, replace names, emails, phone numbers and card or Social Security number shapes with tokens first, and judge a sample of up to 200 records per object.

What Spriggit stores

Spriggit’s database and files are stored with Supabase in Canada (Montreal), and the app runs on DigitalOcean in New York. HubSpot tokens and AI keys are encrypted at rest.

Snapshots of a portal’s setup: daily for 35 days, weekly for 26 weeks, monthly for 24 months, and the newest ten always. A snapshot a plan depends on is kept with that plan.
Record values an audit needs for a fix: 30 days, or longer while a fix that used them can still be undone.
Values saved before a change so it can be put back: the 90-day undo window.
After an uninstall: HubSpot tokens are deleted at once, and the portal’s history 90 days later.

Who processes data

Supabase: the database, sign-in and file storage.
DigitalOcean: hosting for the app.
Resend: email, such as invitations and digests.
Stripe: billing.
The AI provider your agency picks: Anthropic, OpenAI or Google Gemini.

AI runs on your agency’s own API key. The key is encrypted and tied to your workspace, used only on Spriggit’s servers, and never shown again once saved; screens show its last four characters.

Data shared with HubSpot

Scopes used by a shipped feature
Scope	Kind	HubSpot data it covers	Spriggit access	What Spriggit does with it
`oauth`	Required	Basic OAuth access	Read only	Signs the portal in and reads the account details (hub ID, time zone).
`crm.objects.contacts.read`	Required	Contact records	Read only	Reads contacts to count them and to check data quality in audits.
`crm.objects.companies.read`	Required	Company records	Read only	Reads companies to count them and to check data quality in audits.
`crm.objects.deals.read`	Required	Deal records	Read only	Reads deals to count them and to check data quality in audits.
`crm.schemas.contacts.read`	Required	Contact property settings	Read only	Reads contact properties, groups and validation rules.
`crm.schemas.companies.read`	Required	Company property settings	Read only	Reads company properties, groups and validation rules.
`crm.schemas.deals.read`	Required	Deal property settings	Read only	Reads deal properties, groups, validation rules and pipelines.
`crm.objects.owners.read`	Required	Owners (users who can be assigned to records)	Read only	Reads owners so audits and plans can name them.
`crm.objects.tickets.read`	Optional	Ticket records	Read only	Reads tickets to count them and reads ticket pipelines.
`crm.objects.tickets.write`	Optional	Ticket records	Read and write	Seeds and cleans up demo tickets.
`crm.schemas.tickets.read`	Optional	Ticket property settings	Read only	Reads ticket properties, groups and pipelines.
`crm.schemas.tickets.write`	Optional	Ticket property settings	Read and write	Creates and changes ticket properties and property groups from an approved plan.
`crm.schemas.contacts.write`	Optional	Contact property settings	Read and write	Creates and changes contact properties, property groups and validation rules from an approved plan.
`crm.schemas.companies.write`	Optional	Company property settings	Read and write	Creates and changes company properties, property groups and validation rules from an approved plan.
`crm.schemas.deals.write`	Optional	Deal property settings	Read and write	Creates and changes deal properties, property groups and validation rules from an approved plan.
`crm.schemas.custom.read`	Optional	Custom object definitions	Read only	Reads custom object schemas, properties and associations.
`crm.schemas.custom.write`	Optional	Custom object definitions	Read and write	Creates and changes custom object schemas from an approved plan.
`crm.objects.custom.read`	Optional	Custom object records	Read only	Counts custom object records for the portal limits report.
`crm.objects.custom.write`	Optional	Custom object records	Read and write	Seeds and cleans up demo records on custom objects.
`crm.objects.contacts.write`	Optional	Contact records	Read and write	Seeds and cleans up demo contacts; applies approved data fixes and duplicate merges.
`crm.objects.companies.write`	Optional	Company records	Read and write	Seeds and cleans up demo companies; applies approved data fixes and duplicate merges.
`crm.objects.deals.write`	Optional	Deal records	Read and write	Seeds and cleans up demo deals; applies approved data fixes and duplicate merges.
`crm.objects.products.read`	Optional	Product records	Read only	Reads the product library.
`crm.objects.products.write`	Optional	Product records	Read and write	Creates and changes products from an approved plan; seeds demo products.
`crm.objects.line_items.read`	Optional	Line item properties	Read only	Reads line item properties.
`crm.objects.line_items.write`	Optional	Line item records	Read and write	Seeds and cleans up demo line items.
`crm.objects.leads.read`	Optional	Lead records and properties	Read only	Reads lead properties and pipelines.
`crm.objects.leads.write`	Optional	Lead records	Read and write	Seeds and cleans up demo leads.
`crm.pipelines.orders.read`	Optional	Order pipelines	Read only	Reads order pipelines and their stages.
`crm.pipelines.orders.write`	Optional	Order pipelines	Read and write	Creates and changes order pipelines through the pipelines section of an approved plan.
`crm.lists.read`	Optional	Lists (segments)	Read only	Reads lists, their filters and their membership type.
`crm.lists.write`	Optional	Lists (segments)	Read and write	Creates lists and updates list filters from an approved plan.
`automation`	Optional	Workflows (legacy scope covering read and write)	Read and write	Reads workflows; creates, changes and deletes workflows (created switched off) from an approved plan.
`forms`	Optional	Forms (legacy scope covering read and write)	Read and write	Reads forms; creates and changes forms from an approved plan.
`content`	Optional	Content APIs: pages, blog posts, marketing email and URL redirects	Read and write	Reads and manages URL redirects; creates marketing email drafts from an approved plan (never sends or publishes); reads marketing email send counts for the credits meter.
`marketing.campaigns.read`	Optional	Marketing campaigns and their assets	Read only	Reads campaigns and the assets attached to them.
`marketing.campaigns.write`	Optional	Marketing campaigns and their assets	Read and write	Creates and changes campaigns and attaches assets from an approved plan.
`behavioral_events.event_definitions.read_write`	Optional	Custom event definitions	Read and write	Reads custom event definitions; creates and changes them from an approved plan.
`settings.users.read`	Optional	Account users and their permissions	Read only	Reads users, roles and seat holders for audits and plans.
`settings.users.write`	Optional	Account users and their permissions	Read and write	Creates, changes and removes users from an approved plan.
`settings.users.teams.read`	Optional	Teams	Read only	Reads teams and their members.
`settings.users.teams.write`	Optional	Teams	Read and write	Creates teams and changes membership from an approved plan.
`settings.currencies.read`	Optional	Company currency and exchange rates	Read only	Reads the company currency and exchange rates.
`settings.currencies.write`	Optional	Company currency and exchange rates	Read and write	Sets the company currency and exchange rates from an approved plan.
`hubdb.tables.read`	Optional	HubDB tables	Read only	Reads HubDB table definitions.
`hubdb.tables.write`	Optional	HubDB tables	Read and write	Creates and changes HubDB tables from an approved plan.
`hubdb.tables.publish`	Optional	HubDB table publishing	Read and write	Publishes a HubDB table after it is created or changed in an approved plan.
`hubdb.rows.read`	Optional	HubDB rows	Read only	Reads HubDB rows.
`hubdb.rows.write`	Optional	HubDB rows	Read and write	Adds the rows of a table created in an approved plan.
`business_units_view.read`	Optional	Brands (business units)	Read only	Reads which brands a user can see.
`crm.objects.users.read`	Optional	User records in the CRM	Read only	Reads users when settings.users.read is not granted.
`settings.billing.write`	Optional	Paid seats (billing settings)	Read and write	Reads seat assignments, which HubSpot only exposes under this scope; assigns and removes seats from an approved plan.
`account-info.security.read`	Optional	Account activity and login history	Read only	Reads login activity for the inactive-seat audit.
`conversations.read`	Optional	Help desk and inbox threads, messages and actors	Read only	Counts inbound conversations a month for the credits goals (Customer Agent). Reads thread dates only, never message text.
`crm.objects.invoices.read`	Optional	Invoice records	Read only	Counts open and past-due invoices for the credits meter and goals (Revenue agent).
`crm.schemas.invoices.read`	Optional	Invoice property settings	Read only	Reads invoice properties with the other objects’ definitions.

Scopes requested but not used by a shipped feature

Scopes requested but not used by a shipped feature
Scope	Kind	HubSpot data it covers	Spriggit access
`marketing-email`	Optional	Marketing email (retrieve and send)	Not used
`marketing.campaigns.revenue.read`	Optional	Revenue and deal amounts attributed to campaigns	Not used
`automation.sequences.read`	Optional	Sequences	Not used (raw API tool only)
`automation.sequences.enrollments.write`	Optional	Sequence enrollments	Not used (raw API tool only)
`crm.objects.goals.read`	Optional	Goals	Not used (raw API tool only)
`communication_preferences.read`	Optional	Contacts’ subscription preferences	Not used (raw API tool only)
`communication_preferences.write`	Optional	Contacts’ subscription preferences	Not used (raw API tool only)
`communication_preferences.read_write`	Optional	Contacts’ subscription preferences	Not used (raw API tool only)
`communication_preferences.statuses.batch.read`	Optional	Subscription status of many contacts at once	Not used (raw API tool only)
`communication_preferences.statuses.batch.write`	Optional	Subscription status of many contacts at once	Not used (raw API tool only)
`crm.import`	Optional	CRM imports	Not used (raw API tool only)
`crm.export`	Optional	CRM exports	Not used
`crm.objects.users.write`	Optional	User records in the CRM	Not used
`analytics.behavioral_events.send`	Optional	Custom event occurrences	Not used (raw API tool only)

Report a security issue

Email [email protected]