Privacy policy

What Fuse does with your HubSpot and AWS Partner Central data.

Who we are

Fuse is a HubSpot app operated by a21.ai. It connects HubSpot Deals to AWS Partner Central opportunities. Contact: support@a21.ai.

What Fuse reads and writes in your HubSpot account

When an administrator installs Fuse, HubSpot asks them to approve these permissions: read and write Deals, Deal property definitions, Companies and Contacts; read owners; read users. One further permission, reading sales emails, is optional.

• Deals: Fuse reads Deals and creates or updates them, including a group of properties named "AWS Partner Central" that Fuse adds to your Deals.
• Companies and Contacts: Fuse reads those associated with a Deal, and creates or updates them when you supply missing values in the opportunity form or when an AWS opportunity is imported.
• Owners and users: Fuse reads the Deal owner and the signed-in user to match people to AWS Partner Central contacts and to check who may administer Fuse.
• Notes and tasks: Fuse writes a note or task to a Deal only after a user confirms it.

What Fuse stores

• Connection data: your HubSpot access and refresh tokens, your HubSpot account ID, and the AWS account ID and role you connect.
• People: HubSpot owner and user IDs, names and email addresses used for owner matching and access control; the email of the administrator who accepted the General Service Agreement.
• Sync records: links between Deals and AWS opportunities, with a copy of the mirrored opportunity fields (which can include customer company, address, contacts and AWS account-manager details); saved opportunity drafts; operation and event records; initial-sync review decisions.
• FuseAI records, if you turn FuseAI on: the validated AI output, hashes of the input and output, token counts and usage counts. Fuse does not store the raw prompt.
• Audit and usage records: who did what and when. Product usage events use pseudonymous identifiers and exclude email addresses, prompts and CRM content.

Who receives your data

• AWS Partner Central. Fuse sends opportunity details from your Deal (customer, project, contacts, deal size and related fields) to your own AWS Partner Central account, and reads opportunity data back. Fuse acts through a role in your AWS account that you create and can remove.
• Amazon Bedrock, only if FuseAI is turned on. To produce a suggestion, Fuse sends Deal, company, contact, owner and recent activity text (notes, tasks, calls, emails, meetings from the last 180 days) to an Anthropic model on Amazon Bedrock. Credential-like strings are removed first. Fuse does not log prompts or outputs at the account level.
• AWS Partner Central agent, only if FuseAI is turned on. Text a user types to the agent is sent to the AWS Partner Central agent service under your role. The transcript is kept for 48 hours.
• Infrastructure. Fuse runs on Amazon Web Services in the US East (N. Virginia) region.

Fuse contains no advertising or third-party analytics trackers.

How data is protected

• Data in Fuse's databases, queues and storage buckets is encrypted at rest using AWS-managed keys.
• Fuse reaches your AWS account only through a role you create, protected by a unique external ID. It receives short-lived credentials and does not store long-lived AWS keys.
• The a21.ai administration console requires multi-factor sign-in, has no self-signup, and is limited to named administrators. Administrative actions are recorded in an audit log.
• Fuse is multi-tenant. Each HubSpot account is a separate tenant, and a browser cannot choose or override its tenant.

Your choices

• FuseAI and the AWS Partner Central agent are off until an administrator turns them on.
• The sales-email permission is optional. Without it, email text is not used.
• Disconnecting Fuse revokes its access to your HubSpot account and starts the deletion period below.
• Exports: a Fuse administrator can export your Fuse records (links, operations, audit events, sync decisions, agreement acceptance and configuration) as JSON, CSV or Parquet. Download links last minutes and files are removed after two days.

Retention and deletion

• After you disconnect, or if HubSpot access is revoked, Fuse deletes your stored tokens right away and deletes your tenant data after 90 days. A reinstall within that period cancels the deletion.
• Your AWS connection secret is deleted at that point.
• Backups are kept separately: database point-in-time history for up to 35 days and daily snapshots for up to 365 days.
• Fuse does not delete the Deals, Companies, Contacts, properties, notes or tasks it wrote in your HubSpot account, or the opportunities it created in your AWS Partner Central account. Those remain yours to manage.

Contact

Questions or requests about your data: support@a21.ai.