Diffspot - Terms of Service

Effective Date: 2026-02-14

Company: Concretio Holistic Software Services Private Limited

Contact: diffspot@concret.io

1. Acceptance of Terms

By accessing or using HubSpot Sandbox Scanner (also branded as DiffSpot) ("the Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree, do not access or use the Service.

These Terms apply to all users of the Service, including HubSpot administrators, RevOps professionals, HubSpot partners, and agencies.

2. Description of Service

Concretio Holistic Software Services Private Limited ("Concretio", "we", "us", "our") provides a web-based application that:

  • Connects to your HubSpot portal(s) via OAuth to inventory CRM configuration (custom properties, pipelines, custom object schemas, association labels, forms, and workflows)

  • Compares two HubSpot portals side-by-side to identify configuration drift

  • Generates structured inventory reports, complexity scores, and diff reports in Excel and JSON formats

  • Optionally exports configuration backups to a GitHub repository you specify

  • Delivers reports to an email address you provide (used transiently for delivery only; not stored)

The Service uses read-only HubSpot APIs only and does not write to, modify, or delete any configuration in your HubSpot portals.

3. User Access and Responsibilities

3.1 OAuth-Based Access

The Service uses HubSpot OAuth for authentication. You do not create a separate user account with Concretio. By authorizing our HubSpot OAuth application, you grant us read-only access to your HubSpot portal configuration for the duration of the scan. You may revoke this access at any time through your HubSpot account settings.

3.2 Your Responsibilities

You are responsible for:

  • Ensuring you have authority to connect your HubSpot portal(s) to the Service

  • Maintaining the security of your HubSpot credentials

  • Ensuring your use complies with HubSpot's terms of service and developer policies

  • Providing accurate email addresses for report delivery

  • Validating Service outputs before making irreversible decisions (e.g., deleting sandboxes)

3.3 Prohibited Uses

You agree NOT to:

  • Access HubSpot portals for which you are not authorized

  • Reverse engineer, decompile, disassemble, or attempt to extract source code from the Service

  • Remove or modify any proprietary notices, branding, or labels on the Service

  • Use the Service to build competing HubSpot scanning, auditing, or diffing products

  • Sublicense, sell, rent, lease, or otherwise transfer access to the Service to third parties

  • Circumvent, disable, or interfere with security features, technical limitations, or rate limits of the Service

  • Use automated scripts, crawlers, or bots to access the Service beyond normal usage

  • Upload or transmit malicious code or harmful content

  • Use the Service in any manner that violates HubSpot's own API terms of service or developer policies

  • Violate any applicable laws, including data protection laws

  • Misrepresent your identity or organizational affiliation

4. Intellectual Property

4.1 Concretio's Ownership

All content, features, functionality, source code, user interface designs, trademarks (including "DiffSpot"), and branding of the Service are owned by Concretio Holistic Software Services Private Limited and protected by applicable intellectual property laws.

4.2 Your HubSpot Configuration Data

Configuration data retrieved from your HubSpot portal(s) belongs to you and your organization. We access it solely to provide the Service. We do not claim ownership over your HubSpot configuration data.

4.3 Generated Reports and Exports

Reports, Excel exports, JSON exports, and GitHub backup artifacts generated from your HubSpot data are yours to use, share, and distribute for internal business and client-reporting purposes.

5. Payment Terms

The Service is currently offered free of charge. No payment is required for any current features. Concretio reserves the right to introduce paid plans in the future. If paid plans are introduced, existing free functionality will remain accessible or users will receive advance notice of changes.

6. Third-Party Services

The Service integrates with third-party platforms:

  • HubSpot — CRM configuration access via read-only OAuth

  • GitHub — User-initiated configuration backup exports (optional; to your own repository)

  • Email (SMTP) — Report delivery to the address you provide

Your use of third-party services is subject to their own terms of service and privacy policies. Concretio is not responsible for third-party actions, availability, or data practices.

7. Data and Privacy

Your use of the Service is governed by our Privacy Policy, which is incorporated into these Terms by reference. Key points:

  • Email addresses provided for report delivery are used transiently for SMTP delivery only and are not stored in our database

  • We access HubSpot configuration metadata (not CRM records) in read-only mode; OAuth tokens live only in your browser session cookie (15-min expiry)

  • Configuration metadata is temporarily cached in Google Cloud Firestore (encrypted at rest) for up to 10 minutes to power comparison and export features; deleted on disconnect or logout

  • Email exports send your report to your email provider; GitHub exports commit your report to your specified repository — both are user-initiated and Concretio does not retain copies after delivery

  • Browser downloads (JSON/Excel) are generated server-side and delivered directly to your device; no copy is retained

8. Termination

8.1 Termination by Concretio

We may suspend or terminate your access if you:

  • Violate these Terms

  • Engage in fraudulent or harmful activity

  • Pose a security or compliance risk to our systems

  • Abuse the Service or HubSpot APIs in a manner that jeopardizes our developer access

8.2 Termination by You

You may stop using the Service at any time. To request deletion of any data we may hold (such as server logs), contact diffspot@concret.io.

8.3 Effect of Termination

Upon termination:

  • Your access to the Service ends immediately

  • We will delete or anonymize your data per our retention policy and applicable law

  • Sections covering intellectual property, disclaimers, liability, indemnification, and dispute resolution survive termination

9. Disclaimers and Limitations of Liability

9.1 Service "AS IS"

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. CONCRETIO DISCLAIMS ALL WARRANTIES, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

WE DO NOT WARRANT THAT:

  • The Service will be uninterrupted or error-free

  • Scan results will be complete, accurate, or current at all times

  • The Service will meet your specific migration or compliance requirements

  • HubSpot API responses will be free from gaps, errors, or rate-limit interruptions

9.2 HubSpot API Dependency

The Service depends on HubSpot's APIs. We are not responsible for changes to HubSpot APIs, rate limits, OAuth policies, or service interruptions caused by HubSpot.

9.3 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, CONCRETIO SHALL NOT BE LIABLE FOR:

  • Indirect, incidental, special, consequential, or punitive damages

  • Loss of data, revenue, profits, or business opportunities

  • Decisions or actions taken based on scan reports or diff outputs (including sandbox deletion)

  • Business interruption or downtime

THE SERVICE IS PROVIDED FREE OF CHARGE. OUR TOTAL LIABILITY FOR ANY CLAIM ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED ₹5,000 INR (APPROXIMATELY $60 USD). YOU ACKNOWLEDGE THAT THIS LIMITATION REFLECTS THE FREE NATURE OF THE SERVICE.

10. Indemnification

You agree to indemnify and hold harmless Concretio Holistic Software Services Private Limited, its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including attorney fees) arising from:

  • Your use of the Service in violation of these Terms

  • Your unauthorized access to HubSpot portals via the Service

  • Actions taken based on the Service's outputs

  • Your violation of HubSpot's terms or API policies

  • Your violation of applicable laws

11. Changes to Terms

We may update these Terms at any time. We will notify users of material changes by posting a prominent notice on the Service prior to the change taking effect. Continued use after the effective date of changes constitutes acceptance.

12. Governing Law and Dispute Resolution

12.1 Governing Law

These Terms are governed by the laws of the Republic of India, specifically the laws applicable in the State of Rajasthan, without regard to its conflict of law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

12.2 Dispute Resolution

Disputes shall first be attempted to be resolved through good-faith negotiation for 30 days. If unresolved, disputes shall be submitted to binding arbitration under the Arbitration and Conciliation Act, 1996 (as amended) (India), with proceedings in Jaipur, Rajasthan, India, in the English language.

12.3 Class Action Waiver

You agree to resolve disputes with Concretio only on an individual basis, not as part of any class, consolidated, or representative action.

13. Contact Information

Email: diffspot@concret.io

Address: A-697 Malviya Nagar, Jaipur, Rajasthan, 302017, India

Regional Addenda

United States Users

These Terms are subject to applicable US federal and state laws. California residents have additional rights under CCPA — see below.

California Residents (CCPA / CPRA)

California residents have rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information for cross-context behavioral advertising. The California Privacy Protection Agency (CPPA) regulations effective January 1, 2026 (covering risk assessments and automated decision-making) apply where relevant. Contact: diffspot@concret.io.

European Union Users (GDPR)

EU users have rights under the General Data Protection Regulation. We rely on the Article 27(2)(a) exemption from appointing an EU representative (see our Privacy Policy for details). For GDPR-related matters, contact: diffspot@concret.io. See our Privacy Policy for full GDPR rights.

United Kingdom Users (UK DPA 2018)

UK users have rights under the UK Data Protection Act 2018 and UK GDPR. Contact: diffspot@concret.io.

Canadian Users (PIPEDA)

Canadian users are protected under PIPEDA. Contact our privacy officer at: diffspot@concret.io.

Australian Users

Australian users are protected under the Privacy Act 1988 and Australian Privacy Principles. Contact: diffspot@concret.io.

Indian Users (DPDP Act 2023 / IT Act 2000)

Indian users are protected under the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000.

Grievance Officer: Abhinav Gupta
Email: diffspot@concret.io
Address: A-697 Malviya Nagar, Jaipur, Rajasthan, 302017, India

Grievances will be acknowledged within 24–72 hours and resolved within 7 working days, in line with the DPDP Rules, 2025. Note: The DPDP Act's substantive obligations are being phased in, with full enforcement expected by May 2027; we are committed to proactive early compliance.

Brazilian Users (LGPD)

Brazilian users are protected under the LGPD (Law No. 13,709/2018). Contact: diffspot@concret.io.