Privacy policy
Last updated: 24 October 2026
Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye (“we”) provides Ticket Archive for HubSpot. Contact: support@atesensoftware.com.
Roles
For your account data we are the controller. For the HubSpot ticket data you archive (which can contain personal data of your customers and colleagues) you are the controller and we process it only on your instructions, to produce the archive you request. If you need a data processing agreement (GDPR Art. 28 / KVKK), e-mail us.
What we process and why
- HubSpot identifiers: the portal (hub) id, your HubSpot user id and the portal domain returned by HubSpot when you connect. We do not store your HubSpot name or e-mail address. Purpose: to keep your connections, archives and plan separate.
- HubSpot access tokens for each portal you connect, encrypted with AES-256-GCM. We request read access to tickets, help desk conversations, owners, files and contacts/activities (and, optionally, logged e-mails). The app never changes anything in HubSpot.
- Ticket data while an archive is built: ticket properties, conversation messages, internal comments, notes, calls, logged e-mails and attachments are read from HubSpot, turned into PDFs and stored with the attachments in encrypted cloud storage (Cloudflare R2) so you can download them. Each archive, its files and its index rows are deleted automatically. Archives are kept for up to 7 days after completion, with a maximum of 7 days and 22 hours from the original start. Resuming does not extend this deadline. Unstarted previews are deleted after one hour; you can delete an archive earlier with one click.
- Portal labels: pipeline and status names, owner names and inbox channel names, kept with an archive while it exists to label the PDFs.
- Billing: Paddle.com is the merchant of record and collects your payment and billing details. We receive the subscription status, a Paddle customer id and the portal id the plan covers, never card details. After a purchase we send one plain-text thank-you and getting-started email to the address on your Paddle payment record, through Resend, and we do not store that address for this.
- Technical logs: ids, counts and error codes only (no ticket content, names, e-mail addresses, file names or tokens), kept by our host for a short period for security and troubleshooting.
We do not use your data to train AI models, for advertising, or for anything other than producing your archives.
Waitlist
Before the app opens you can join a waitlist. We store only the e-mail address you enter and the date you joined, use it only to tell you when the app opens, and never share or sell it. It is deleted when you ask us at support@atesensoftware.com, and automatically 12 months after you joined.
Legal bases (GDPR/KVKK)
Performance of our contract with you, our legitimate interest in security and fraud prevention, legal obligations for billing records (handled by Paddle), and your consent for the waitlist, which you can withdraw at any time by e-mailing us.
Processors
- Cloudflare, Inc. (hosting, database, file storage, queues; data may be processed in the EU, US and other regions)
- Paddle.com Market Ltd (payments, merchant of record)
- Resend (delivers the one thank-you email after a purchase)
- HubSpot, Inc. (the API your data comes from)
Retention
Archives are kept for up to 7 days after completion, with a maximum of 7 days and 22 hours from the original start. Resuming does not extend this deadline. Connections: until you disconnect or 180 days without use (then revoked and deleted). Waitlist: until you ask or 12 months. Billing status: as long as needed for billing records. Uninstalling the app in HubSpot also revokes our access.
Your rights
You can delete archives, disconnect portals and delete all your data with “Delete my data” in the app. For access, correction, objection or deletion requests e-mail us; we answer within 30 days. You may also complain to your data protection authority.