HubSpot Integration

OptiqOS for HubSpot

OptiqOS connects to HubSpot CRM in read-only mode and unifies your CRM data with the rest of your stack — accounting, advertising, analytics, and support — for cross-system reporting and AI-driven workflows.

What OptiqOS does with your HubSpot data

Once authorized, OptiqOS continuously syncs read-only HubSpot data into a unified data model. Your CRM stays the system of record; OptiqOS adds a parallel analytical layer that can be cross-referenced with your other connected systems.

We never write back to your HubSpot account. Outbound actions (emails, tasks, workflow triggers) are explicit, opt-in features that require separate authorization and are disabled by default.

Scopes we request

OptiqOS uses HubSpot's tiered scope model. Required scopes work on every HubSpot tier; optional scopes are requested only if your portal supports them (Sales Hub Pro+, Service Hub) and are silently omitted otherwise.

Required

oauth
crm.lists.read
crm.objects.contacts.read
crm.objects.companies.read
crm.objects.deals.read
crm.objects.line_items.read
crm.objects.owners.read
crm.objects.users.read

Optional (granted if available)

crm.objects.appointments.read
crm.objects.leads.read
crm.objects.products.read

Required (every tier) Optional (Sales Hub Pro+ / Service Hub)

How the install works

You receive a magic link from OptiqOS Sent to the email associated with your HubSpot administrator account.

You click through to HubSpot's authorize screen HubSpot shows the scopes OptiqOS is requesting and which HubSpot account to install on. You stay on hubspot.com throughout this step — your credentials never touch OptiqOS.

You approve and HubSpot redirects back HubSpot issues an access token + refresh token to OptiqOS. Tokens are encrypted with AES-256 and stored in Azure Key Vault. Refresh tokens are rotated on every use.

Initial sync begins OptiqOS pulls a full snapshot of the authorized scopes, then incremental refreshes run on a schedule. You see your HubSpot data in OptiqOS within minutes.

Disconnecting OptiqOS

You can revoke OptiqOS's access at any time:

In HubSpot, go to Settings → Integrations → Connected Apps
Find OptiqOS in the list and click Disconnect

OptiqOS stops syncing within minutes. Existing snapshot data in OptiqOS is retained per your account's data retention policy unless you also request deletion via support.

Security

OAuth 2.0 with PKCE (S256) — your password never reaches OptiqOS
TLS 1.2+ everywhere — all traffic encrypted in transit
AES-256 at rest — tokens encrypted in Azure Key Vault
Refresh-token rotation — every refresh issues a new token; old tokens are revoked
Tenant-isolated storage — your data is logically separated at every layer
Read-only by default — write actions require separate, explicit authorization

Need help?

Email [email protected] or visit support.optiq-os.com.

Contact Support