HubSpot

The HubSpot integration utilizes Cyera's HubSpot OAuth 2.0 App and this documentation describes the technical capabilities of this integration, including authorization, scopes/permissions, and utilized endpoints. For more information on how to integrate HubSpot, visit our connection instructions.

Version

This integration utilizes the HubSpot API v3.

Base URL

The base URL used for all HubSpot API endpoints:

https://api.hubapi.com

---

Authentication & Authorization

The Cyera HubSpot integration connects using OAuth 2.0.

Scopes

The HubSpot integration requires specific scopes that must be granted in order to function for a given capability.

Scope	Base	Access	Deletion
content		✳️	✳️
crm.lists.read		✅	✅
crm.objects.contacts.read	✅
crm.objects.contacts.write			✅
crm.objects.custom.read
crm.objects.deals.read		✅	✅
crm.schemas.companies.read
crm.schemas.contacts.read
e-commerce
oauth	✅
sales-email-read		✳️	✳️
tickets

✳️ optional scope

Base Scopes

All base scopes must be granted in order to connect the integration with Cyera. The remaining scopes are only required if enabling those capabilities

Endpoints Utilized

Cyera uses the following endpoints to authorize and test the connection:

Method	Endpoint	Purpose	Docs
GET	/integrations/v1/me	Verify authentication
GET	/oauth/authorize	Request authorization
GET	/oauth/v1/access-tokens/TOKEN	Verify scopes
GET	/oauth/v1/token	Get and refresh access token

---

Limits

Limits in HubSpot are calculated using the leaky bucket algorithm. All requests that are made after rate limits have been exceeded are throttled and an HTTP 429 Too Many Requests error is returned. Requests succeed again after enough requests have emptied out of the bucket.

• Cyera supports requests throttling to stay within 70-80% of specified service rate limits.
• Cyera processes API responses with HTTP 429 status to interrupt requests, waiting and retrying (using an exponential backoff strategy).

---

Capabilities

Access

Cyera's HubSpot integration provides Synchronous Access capabilities for the following supported identifier category: Email.

Data Interactions

For Access requests, Cyera will take the following actions:

1. Search for Contacts using the Data Subject email address.
2. If a match is found, Cyera will extract all objects related to the contact, including the following:

Match Found

• Calls
• Emails
• Meetings

3. If you would like to exclude Hubspot object fields from data extraction, please reach out support@cyera.io.

Endpoints Utilized

Method	Endpoint	Purpose	Docs
GET	/crm/v3/objects/contacts/CONTACT_ID/associations/calls	Get calls associated with a contact
GET	/crm/v3/objects/contacts/CONTACT_ID/associations/emails	Get emails associated with a contact
GET	/crm/v3/objects/contacts/CONTACT_ID/associations/meetings	Get meetings associated with a contact
POST	/crm/v3/objects/contacts/search	Fetch contacts by email
GET	/crm/v3/properties/OBJECT_TYPE	Retrieve properties for object type

---

Deletion

Cyera's HubSpot integration provides Synchronous Deletion capabilities for the following supported identifier category: Email.

Data Interactions

For Deletion requests, Cyera will take the following actions:

1. Extract data subject information using the Access Flow.
2. If a match is found, Cyera will delete the contact and associated records (if selected).

Endpoints Utilized

Method	Endpoint	Purpose	Docs
POST	/crm/v3/objects/contacts/gdpr-delete	Delete contact and associated records

---