Data retention and privacy

What Transactional Email stores, for how long, what it never stores, and where your data lives.

Overview

Transactional Email keeps as little of your data as it can. It stores details about each send for 45 days so you can troubleshoot, but never the emails themselves. Your contacts stay in HubSpot: the app reads the properties a template needs at send time and doesn’t keep them.

What we store and for how long

Data	What it is	Kept for
Send log	For each send: time, recipient email address, template, sender profile, From address, status, error code, message ID, workflow, and delivery, bounce, or complaint times	45 days
Daily totals	Counts of sends and outcomes per day, template, and sender profile — no recipient details	60 days
Suppression list	Addresses that hard-bounced, complained, or soft-bounced repeatedly, and why	Until cleared; 30 days for soft bounces
Template copies	A copy of each HubSpot email you use as a template, with tokens unfilled, so sends don’t depend on HubSpot being reachable	Until the email is deleted in HubSpot or your account is deleted
Content review results	Each template version’s result and the passages it flagged	90 days after the review
Settings	Sender profiles, sending domain and its DNS records, alert recipients, auto-buy budget, Acceptable Use Policy acceptance	Until you change them or your account is deleted
HubSpot connection	The authorization HubSpot gives the app when you install it, stored encrypted	Until you uninstall

Payment details are held by Stripe, our payment processor. We keep only a reference to your Stripe customer and subscription.

What we never store

The emails you send, as your recipients received them.
The contact or company property values used to fill in tokens.

The content review

The review reads your template’s subject, text, and links with tokens left unfilled. It never sees your contacts or their data. See How the transactional content review works.

When data is deleted

When you uninstall, your subscription is cancelled within 7 days, and 14 days after that we delete your sending domain, sender profiles, template copies, send logs, and suppression list. We keep a minimal account record for billing history. The same deletion follows when sending stays disabled for 30 days — an unpaid or ended subscription — and the account closes: 14 days after that. See Uninstalling and reinstalling.

Where your data lives

Transactional Email runs on Amazon Web Services in the United States, and your emails are delivered through Amazon SES. Transactional Email (EU) is a separate listing on the HubSpot App Marketplace that stores your data and sends your email from the EU instead. Each HubSpot account uses one of the two; data isn’t copied between them, so choose before you set up.

Agreements and requests

A Data Processing Agreement (DPA) and our list of subprocessors are available on request. For either, or for questions about your data, email support@cambiumapps.com.