OAuth token handling
QuotePoint stores the HubSpot refresh credential encrypted server-side using authenticated encryption. It is not returned to browser clients. Access credentials are short-lived and refreshed server-side.
HubSpot shared data
What QuotePoint reads, writes, and why.
The HubSpot integration requests only the CRM and schema access needed to launch governed quoting, maintain the QuotePoint deal card, write quote lifecycle state, and reconcile the production product library.
Data flow
Scope usage is explicit.
| HubSpot object | Direction | Purpose |
|---|---|---|
| Deals | Bi-directional | HubSpot → QuotePoint: deal context and selected sales-channel context. QuotePoint → HubSpot: linked quote ID/number, status, approval status, total, and QuotePoint URL. |
| Companies | HubSpot → QuotePoint | Used to prefill customer company context when launching QuotePoint from a deal. |
| Contacts | HubSpot → QuotePoint | Used to prefill customer name and email context when launching QuotePoint from a deal. |
| Products | Bi-directional reconciliation; QuotePoint authoritative | HubSpot → QuotePoint: read products for SKU matching, conflict detection, and reconciliation. QuotePoint → HubSpot: create, update, or deactivate QuotePoint-managed production products. |
| Line items | Bi-directional reconciliation; QuotePoint authoritative | HubSpot → QuotePoint: read QuotePoint-managed Deal line items to verify existence and detect drift before reconciliation. QuotePoint → HubSpot: create, update, or remove only QuotePoint-managed Deal line items using the configured product, quantity, governed unit price, and discount. Unrelated manual line items are not imported or modified. |
| Deal schema / properties | Bi-directional schema management | Used to inspect the deal schema and create or maintain QuotePoint-specific deal properties, including the governed QuotePoint sales-channel field. |
Modern OAuth endpoints
QuotePoint uses HubSpot 2026-03 token issuance, introspection, refresh, and revocation endpoints.
Workspace isolation
Connections are associated with the QuotePoint workspace that authorized them. CRM operations and object mappings are scoped to that workspace connection.
Demo-data protection
Demo and test workspaces cannot synchronize quotes externally, and sample product records are excluded from product-library sync.
Requested scopes
Current HubSpot OAuth scope set.
The app requests OAuth plus deal, company, contact, product, line-item, and deal-schema scopes required for the workflows above.
oauth
crm.objects.deals.read
crm.objects.deals.write
crm.objects.companies.read
crm.objects.contacts.read
crm.objects.products.read
crm.objects.products.write
crm.objects.line_items.read
crm.objects.line_items.write
crm.schemas.deals.read
crm.schemas.deals.write