Privacy

Webflow Forms to HubSpot sends your Webflow form submissions to your HubSpot forms. This page says what we read, what we keep, and for how long. Last changed 25 October 2026.

From Webflow

When you connect Webflow, we ask to read your user info, your sites and your forms, and to write to your sites. We use the write access for one thing only: adding a form submission webhook to each site you choose.

• We keep your Webflow user id and email address (to sign you in and to email you when a submission does not reach HubSpot), your Webflow access token (encrypted), the ids of the sites you choose, and the webhook id.
• We read your site names and field names to show them on the setup pages. We do not keep them.
• For each form you pair, we keep the Webflow form id and name, which Webflow field goes to which HubSpot field, and any consent text you type.
• For each submission of a paired form, Webflow sends us the form name, the page address, the time, and every value the visitor typed, including the visitor's HubSpot cookie if you use the visit history snippet. We keep these to send the submission and to show it in your log.
• Once a day we read the last day's stored submissions of each paired form from Webflow, to find any that did not reach HubSpot. We keep only the missing ones.

From HubSpot

When you connect HubSpot, we ask for the forms scope, contact property definitions, and subscription types.

• We keep your HubSpot portal id and data region, and your HubSpot access and refresh tokens (encrypted).
• We read your forms (fields, options and consent settings), your subscription types, your list of collected forms (for setup checks), and the recent submissions of each paired form, including their values (for the daily comparison). We do not keep them.
• We send each submission to the HubSpot form you paired it with.
• We never read or store your HubSpot contact records.

Billing

Stripe handles payments for paid plans. We keep your Stripe customer id, subscription id and plan. Your card details go to Stripe only; we never see them.

How long we keep it

• We delete each submission and its log entries 90 days after it came in.
• When a submission is held as possible spam, we delete the visitor's HubSpot cookie from it right away.
• Your account, connections, pairings and plan stay while you use the service. Write to us and we delete your account and everything in it.

Who else handles it

• Render hosts the app and its database, in Oregon, USA.
• Stripe takes payments.
• Resend sends our emails about submissions that did not reach HubSpot. Those emails contain the visitor's email address and the reason.

Your Webflow and HubSpot accounts are your own; their own privacy terms apply there.

What we do not do

We do not sell or rent any data, share it for advertising, or use it for anything except delivering your submissions and showing you what happened to them. This app has no analytics or tracking scripts. It sets one cookie, to keep you signed in. Our server logs leave out form values and email addresses.

Contact

Questions, or a request to see or delete your data: write to the contact link on our Webflow Marketplace listing.