What Management OS does with your HubSpot data.

Management OS reads CRM data from your HubSpot instance — specifically: companies, contacts, deals, and sales-email engagement events. We do not access email body content, attachments, marketing campaign data, service hub tickets, CMS pages, files, or any HubSpot data not explicitly listed in the scope table below.

Why: Management OS is the leadership execution layer above the revenue stack. We synthesize CRM data into a Weekly Intelligence Brief that develops the leader, their team, and their business. We can't synthesize what we can't read.

We do not write to your HubSpot CRM. Management OS is a read-only consumer of your HubSpot data. We do not create, modify, or delete any HubSpot records — no companies, no contacts, no deals, no notes, no activities, no properties, no workflow triggers.

All Management OS outputs (Account Plans, Coaching Briefs, Forecast Locks, Meeting Prep dossiers, Pitch Decks) are generated and stored in Management OS's own database and surfaced through the Management OS application — not pushed back into your HubSpot instance.

Every scope below maps to a specific feature. We requested the minimum scope set needed to deliver the Management OS feature surface; we did not request scopes that we don't currently use.

Required scopes (5)

These scopes are requested on every connection. Without them, the core Management OS feature surface does not function.

Optional scopes (10)

These scopes are requested only when the customer's HubSpot tier has the corresponding feature enabled (e.g., crm.objects.custom.read is only relevant for HubSpot Operations Hub customers with custom objects). If the customer's tier does not include a feature, the corresponding optional scope is skipped without blocking the install.

Application database: Supabase Postgres (Management OS's production database, US East). Encrypted at rest (AES-256), encrypted in transit (TLS 1.3). Workspace-scoped row-level security (RLS) means one customer's data is never visible to another.

OAuth tokens: Stored in the same Supabase database under workspace-scoped RLS. Tokens are encrypted at rest and never returned to client browsers. Only the Management OS server-side runtime has access via service-role credentials.

Inference layer: Anthropic API (Claude models). CRM data required for a specific brief generation is passed to Anthropic; outputs are returned to Management OS and stored in our database. Anthropic does not train on customer data per their API terms.

Retention: We retain HubSpot-sourced data while your subscription is active. On disconnect we delete OAuth tokens immediately. On subscription cancellation, customer data is retained for 30 days for restoration, then permanently deleted. Data subject deletion requests are honored within 30 days per our Privacy Policy.

1. Sign up at mgmt-os.ai and complete onboarding to your workspace
2. Open Management OS → Settings → Integrations
3. Find HubSpot in the integration directory and click Connect HubSpot
4. You'll be redirected to HubSpot's authorization screen. Sign in with the HubSpot account you want Management OS to read from
5. Review the requested scopes and click Connect app
6. You'll return to Management OS with a confirmation that the integration is connected. The initial CRM sync starts immediately and typically completes within 2-5 minutes

If you administer HubSpot on behalf of an organization: Some HubSpot instances require admin pre-approval for new OAuth apps. If you encounter an approval prompt, your HubSpot admin can approve Management OS for organization-wide use.

The Weekly Intelligence Brief is the primary surface. Three pillars synthesize your HubSpot data:

• Develop Your Business — deal scoring (every open deal scored against the Opportunity OS rubric), forecast accuracy, account plans, champion-behavior alerts, renewal cascade
• Develop Your Team — coaching priorities mapped to specific reps and deals, rep-effectiveness rankings, 1:1 prep, GROW conversation planners
• Develop Yourself — leader focus, calendar audit, ninety-day competency focus, decision deadlines you're sitting on

Ask Anything (AMA) — a conversational surface where you can query your HubSpot data in plain English. Examples: "Which deals slipped this quarter?", "Show me the top 5 deals at risk with no champion activity in 14 days", "What's my coverage ratio against Q4 quota?"

1. Open Management OS → Settings → Integrations
2. Find HubSpot in the connected integrations list
3. Click Disconnect → confirm

On disconnect we immediately delete the stored OAuth tokens and stop reading any new CRM data. Previously synthesized briefs remain in your Management OS workspace as historical records — they are not deleted automatically because they may contain decisions and context the leader still references.

To remove all historical briefs and data after disconnect, email privacy@mgmt-os.ai with your workspace identifier. We process deletion requests within 30 days.

1. Sign in to HubSpot as an account administrator
2. Open Settings → Integrations → Connected apps
3. Find Management OS in the connected integrations list
4. Click the integration → Uninstall or Revoke access

Revoking from HubSpot's side invalidates our tokens immediately. Our next API call returns 401 and we surface a re-connection prompt in Management OS Settings.

Security incident reporting: security@mgmt-os.ai
Privacy / data subject requests: privacy@mgmt-os.ai
Integration support: support@mgmt-os.ai

For general questions about Management OS, see our Support page or Manifesto.