Privacy policy

1. Scope

Turbyn (“we”, “us” or “our”) is a United States business that provides a platform for building and running custom HubSpot workflow actions. This Privacy Policy describes how we handle personal information in connection with our website, accounts, services and business communications.

For account administration, billing, website activity and communications, Turbyn determines the purposes and means of processing. For personal information that customers submit through their workflows, we process information on their behalf under our data processing agreement. The customer’s privacy notice applies to its collection and use of that information.

Contact hello@useturbyn.com with questions about this policy or to exercise your privacy rights.

2. Information we collect

We receive information directly from you, from your organization and its administrators, from connected services, and automatically when you use our services.

Category	Information included
Account information	Name, email address, authentication identifiers, organization membership, roles and permissions.
Connection information	HubSpot portal identifiers, authorized permissions, access tokens and connection settings.
Customer content	Action source code, dependencies, configuration, build artifacts, workflow inputs and outputs, stored values, execution logs and error messages.
Billing information	Plan, usage, billing contact, subscription, invoice and payment-status information. Payment card information is handled by the payment provider.
Communications	Information you provide in enquiries, support requests and other correspondence.
Technical and usage information	IP address, browser and device information, request details, service activity and diagnostic records.
Website analytics information	Where optional analytics is enabled and you consent, page visits, referral information, browser identifiers and information about the company associated with a visit.

The customer determines which personal information is included in workflow inputs, code, stored values and outputs. Connected services provide information within the permissions authorized by the customer. Marketing providers may associate website activity with business information to help us understand interest in our services.

Our contact form sends your name, email address, optional company, enquiry topic, message and the contact page address to HubSpot so we can receive and respond to your request. This works independently of optional website analytics and does not subscribe you to marketing emails.

3. How we use information

We use personal information to:

• Create and administer accounts, authenticate users and manage workspace access.
• Connect authorized services, build and execute actions, return results and maintain execution history.
• Manage subscriptions, measure usage, process payments and maintain business records.
• Respond to enquiries, provide support and send service-related communications.
• Detect misuse, investigate errors and protect the security and availability of our services.
• Understand website usage and improve our website and services.
• Meet legal obligations, resolve disputes and enforce our agreements.

Where applicable law requires a legal basis, we process information to perform a contract with you, comply with legal obligations, pursue legitimate interests, or act on your consent. Our legitimate interests include operating and securing our business, administering organizational accounts, responding to requests and improving our services. We consider these interests against individuals’ rights and interests. We rely on consent for optional website analytics.

Some information is necessary to provide an account, connection or requested feature. If you do not provide it, that functionality may be unavailable. Declining optional analytics does not prevent you from browsing our website or contacting us.

4. How we share information

We share information in the following circumstances:

• Service providers. Providers help us deliver hosting, authentication, code execution, monitoring, email, enquiry management, payment processing and website analytics. The subprocessors and service providers page describes their functions.
• Your organization. Authorized workspace members and administrators can access information according to their roles and permissions.
• Your integrations. We return workflow results to the connected HubSpot portal and send information to other destinations as instructed by your code or configuration.
• Legal and security purposes. We may disclose information where required by law or reasonably necessary to protect rights, investigate misuse, address security incidents or enforce our agreements.
• Business transactions. Information may be disclosed in connection with a merger, acquisition, financing or sale of business assets, subject to confidentiality and applicable data-protection requirements.
• At your direction. We may disclose information when you authorize us to do so.

We do not sell customer workflow data or use it for cross-context behavioral advertising. Optional website analytics is separate from customer workflow processing. With your consent, analytics providers receive website activity and identifiers for the purposes described above. Their own notices explain any processing they carry out for their own purposes. You can decline or withdraw optional analytics through the controls described in our cookie policy.

5. International processing

Turbyn is based in the United States and uses service providers that operate internationally. Personal information may be processed outside your country, including in the United States and Europe, where data-protection laws may differ.

International transfers are subject to applicable data-protection requirements. Where additional safeguards are required, the necessary contractual or other lawful transfer arrangements must be in place before the transfer. Contact us for information about the safeguards applicable to your information. Any agreed data-location requirements must be set out in your service agreement.

6. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy. We determine retention by considering the type and sensitivity of information, the duration of our relationship, service requirements, security needs, legal obligations and the need to establish or defend legal claims.

• Account and connection information is retained to administer your account and authorized integrations.
• Customer content is retained to provide the service and carry out customer instructions. Run-history availability depends on the selected plan; separate retention rules apply to operational logs, stored objects and backups.
• Billing records are retained for accounting, tax and legal requirements.
• Support and business correspondence is retained to address requests and maintain relevant business records.
• Cookie and browser-storage retention is described in our cookie policy.

When information is no longer needed, we delete it or render it anonymous. Information retained because of legal obligations or in backups remains subject to applicable protections. Customer personal data is returned or deleted in accordance with the data processing agreement.

7. Security

We use technical and organizational measures designed to protect personal information, including workspace access controls, encrypted credential storage and isolated execution environments. No method of transmission or storage is completely secure.

Credentials stored in the vault are supplied to authorized executions through the run context. If your code logs or returns a credential, it may appear in stored logs or outputs. You are responsible for controlling workspace access and avoiding unnecessary personal information or credentials in code, logs and support messages. See our security page for more information.

8. Your rights and choices

Depending on where you live and the applicable law, you may have the right to:

• Request access to your personal information and receive a copy.
• Correct inaccurate information or request deletion.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Receive information in a portable format.
• Withdraw consent without affecting the lawfulness of processing before withdrawal.
• Opt out of sale, sharing or targeted advertising where those rights apply.
• Appeal a decision on a privacy request or complain to the relevant data-protection authority.

Send requests or appeals to hello@useturbyn.com. We may need to verify your identity and, where applicable, an authorized agent’s authority. We respond within the period required by applicable law. We will not discriminate against you for exercising your privacy rights.

If your request concerns information processed for a Turbyn customer, contact that organization directly. We will assist the customer in responding as required by our agreement and applicable law.

You can change optional cookie preferences using Cookie settings when available in the website footer. Our website respects Global Privacy Control and Do Not Track signals by not loading optional marketing tracking. These choices apply to the browser or device on which they are made.

9. Children

Our services are intended for business users and are not directed to children under 18. If you believe a child has provided personal information directly to us, contact us so we can take appropriate action. Customers must not submit children’s data or other restricted data contrary to our terms of service.

10. Changes to this policy

We may update this policy to reflect changes to our services, practices or legal requirements. The date above identifies the latest revision. We will provide additional notice of material changes, and obtain consent where required by law.

11. Contact

For privacy questions and requests, contact Turbyn at hello@useturbyn.com. For product support, contact support@useturbyn.com.