--- title: Cambium Apps Privacy Policy --- [![camapps-wide](https://www.cambiumapps.com/hubfs/camapps-wide.png)](https://www.cambiumapps.com/?hsLang=en) - [TRANSACTIONAL EMAIL](https://www.cambiumapps.com/transactional-email?hsLang=en) ## [About Transactional Email Send receipts, renewal notices and account alerts from HubSpot workflows, using emails you build in HubSpot's editor. They reach contacts who unsubscribed from your marketing email, too.](https://www.cambiumapps.com/transactional-email?hsLang=en) [START FREE TRIAL](https://www.cambiumapps.com/transactional-email/install?hsLang=en) ### [Receipts Send a receipt when a deal closes or a payment comes in.](https://www.cambiumapps.com/transactional-email/use-cases/receipts?hsLang=en) ### [Subscription Notices Renewal reminders, failed payments and plan changes.](https://www.cambiumapps.com/transactional-email/use-cases/subscription-notices?hsLang=en) ### [Account Notifications Welcome, access and status emails your customers need.](https://www.cambiumapps.com/transactional-email/use-cases/account-notifications?hsLang=en) ### [vs. HubSpot's Add-on How we compare with HubSpot's Transactional Email add-on.](https://www.cambiumapps.com/transactional-email/compare/hubspot-transactional-email-add-on?hsLang=en) ### [Pricing $89 a month for 1,000 emails, with 20 free sends to start.](https://www.cambiumapps.com/transactional-email/pricing?hsLang=en) ### [Security & Privacy How we send, what we store and how long we keep it.](https://www.cambiumapps.com/transactional-email/security?hsLang=en) ### [HubSpot Marketplace Visit our listing on the HubSpot Marketplace](https://www.cambiumapps.com/transactional-email/marketplace?hsLang=en) - [VLOOKUP](https://www.cambiumapps.com/vlookup?hsLang=en) ## [About VLOOKUP Use VLOOKUP for Workflow to simplify and scale your HubSpot operations. VLOOKUP is a workflow action that allows you to use a property value from a record to look up information from an outside data source and use the information returned downstream in your workflow.](https://www.cambiumapps.com/vlookup?hsLang=en) [START FREE TRIAL](https://www.cambiumapps.com/vlookup/install?hsLang=en) ### [Features VLOOKUP is simple, yet powerful. Learn about its current and future feature set.](https://www.cambiumapps.com/vlookup#features) ### [HubSpot Marketplace Visit our listing on the HubSpot Marketplace](https://www.cambiumapps.com/vlookup/marketplace?hsLang=en) ### [Use Cases VLOOKUP's uses are only limited by your imagination.](https://www.cambiumapps.com/vlookup#use-cases) ### [Help & Support Learn how VLOOKUP works and get answers to many frequently asked questions.](https://www.cambiumapps.com/vlookup/help?hsLang=en) ### [Pricing VLOOKUP is very affordable and has no usage limitations.](https://www.cambiumapps.com/vlookup#pricing) ### [Partner With Us Are you a HubSpot Solution Partner interested in using VLOOKUP with your clients?](https://www.cambiumapps.com/vlookup/partnerinterest?hsLang=en) - [HUBSPY](https://www.cambiumapps.com/hubspy?hsLang=en) - [SERVICES](https://www.cambiumapps.com/services?hsLang=en) - [CONTACT](https://www.cambiumapps.com/contact?hsLang=en) # Privacy Policy Last updated: October 6, 2026 Cambium Advisors LLC, doing business as Cambium Apps ("Cambium", "we", "us"), builds apps for HubSpot. This policy explains what personal information we collect, why, who we share it with, how long we keep it, and the choices you have. It covers our websites (cambiumapps.com and help.cambiumapps.com) and our apps: Cambium Transactional Email, VLOOKUP and HubSpy. The section on Transactional Email gives more detail on that app, because it handles your customers' information on your behalf. ## At a glance | What | Why we have it | How long we keep it | | --- | --- | --- | | Your account details (HubSpot account ID, your name and email) | To run your account, bill you and send you notices | While you use our apps, then 14 days after your subscription ends | | Billing details | To charge your subscription | Held by Stripe. We keep invoice records as long as tax and accounting law requires | | Website usage (pages viewed, browser, IP address) | To understand and improve our websites | Per our analytics provider's settings | | Transactional Email send logs | To show you what was sent and what failed | 45 days | | Transactional Email suppression list | To stop sending to addresses that bounced or complained | While you use the app, then 14 days after your subscription ends | We don't sell personal information, and we don't use your HubSpot data for advertising. ## Our two roles **When we're responsible for the data.** For information about you as our customer (your account, billing and support conversations) and about visitors to our websites, Cambium decides how the information is used. We're the "controller" under laws like the GDPR. **When we act on your behalf.** When you use our apps, they process data from your HubSpot account, such as your contacts, on your instructions. For that data, you're the controller and Cambium is your "processor" or "service provider". We use it only to provide the app to you. If you're one of our customer's contacts and have a question about your data, contact the company that emailed you. We'll help them answer it. ## Information we collect **Information you give us.** Your name, email address, company and job title when you install an app, contact us, or ask for support. When a Super Admin accepts our Acceptable Use Policy, we record who accepted it, which version, and when. **Information from HubSpot.** When you install one of our apps, HubSpot gives us your HubSpot account ID and the name and email of the user who installed it. We also read the names and email addresses of your account's admins, so we can send them account, usage and billing notices. **Payment information.** Stripe collects and stores your card or bank details. We never see or store full card numbers. We receive your billing name, email, address and payment status from Stripe. **Information collected automatically on our websites.** IP address, browser and device type, operating system, referring page, pages viewed and time on page, collected with cookies and similar technologies. See "Cookies" below. **Information our apps process on your behalf.** The data each app needs from your HubSpot account to do its job, described for Transactional Email below. ## How we use information - To provide, maintain and support our apps - To create and manage your account, and to bill you - To send you service messages, such as usage alerts, payment notices and policy changes - To detect, investigate and fix errors - To protect our services and shared email infrastructure from abuse, fraud and security threats - To enforce our terms and Acceptable Use Policy, and to meet legal obligations - To understand how our websites are used and improve them - To send you news about our products, if you've agreed to it. You can unsubscribe at any time Where the GDPR applies, we rely on these legal bases: performing our contract with you, our legitimate interests in running and securing our services, your consent (for marketing and some cookies), and compliance with the law. ## Cambium Transactional Email Transactional Email adds a workflow action that sends emails you build in HubSpot to your HubSpot contacts. Here's exactly what it handles. ### What it reads from HubSpot - **The recipient contact:** the email address mapped in your workflow, and the contact properties your email uses as personalization tokens - **The recipient's primary company:** the company properties your email uses as tokens - **Your email templates:** the content of the marketing emails you select in the action The app reads only the recipient email you map from the workflow. It doesn't read the deal, ticket or other record that's enrolled in the workflow. ### What it writes to HubSpot - **Timeline events** on the contact: Sent, Bounced and Spam complaint - **Three contact properties:** Suppressed, Suppression reason and Last transactional email sent ### What it stores, and for how long | Data | Contents | Kept for | | --- | --- | --- | | Send logs | Recipient email address, template, sender profile, status, error code, message ID and timestamps | 45 days | | Suppression list | Email addresses that hard-bounced or marked your email as spam, and the reason | While you use the app | | Template review results | The outcome of each template review, and the text it flagged | While you use the app | | Sender profiles and domain settings | From name, From address, reply-to address, sending domain and its DNS records | While you use the app | | Usage counts | Number of emails sent each billing period | While you use the app | Each email is built when the workflow runs and handed to Amazon Simple Email Service (SES) for delivery. The app doesn't store the finished email afterward. The Standard plan doesn't add open or click tracking to your emails. ### How email delivery works Emails go out through Amazon SES from the domain you verify. When a mailbox provider reports a bounce or a spam complaint, SES passes that report to us, and we record it in your send logs and suppression list. Each customer account has its own suppression list. ### Template review Before a template can send, and whenever it changes, the app checks it automatically to confirm the content is transactional. The review sends the template's content to a large language model hosted on Amazon Bedrock, in our AWS account. Under AWS's terms, Amazon Bedrock doesn't use that content to train models or share it with model providers. The review sees the template as you wrote it, with personalization tokens in place of your contacts' details. ### When you uninstall Uninstalling the app cancels your subscription. It ends 7 days after you uninstall or 1 day before your renewal date, whichever comes first. We delete your account data, send logs, suppression list, template review results and sender settings 14 days after your subscription ends. If you reinstall within those 14 days, everything is restored. Encrypted backups are overwritten on a rolling schedule within 30 days after that. ## Who we share information with We share personal information only with the service providers that help us run our business. Each one may use it only to provide its service to us. | Provider | What they do for us | Where | | --- | --- | --- | | HubSpot | The platform our apps run in; our website, help site and analytics | United States | | Amazon Web Services | Hosting, databases, email delivery (SES) and template review (Bedrock) | United States | | Stripe | Payments and billing | United States | | PostHog | Error tracking for our apps | United States | | Linear | Tracking bugs we find in our apps | United States | | Microsoft Azure | Hosting for some of our apps | United States | Error reports and bug tickets sent to PostHog and Linear use internal identifiers. They don't include your contacts' email addresses or your email content. We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of our business. We'd tell you before your information became subject to a different privacy policy. ## Cookies Our websites use cookies and similar technologies from HubSpot to remember your preferences, measure traffic and see which pages are useful. Where the law requires it, we ask for your consent first. You can block or delete cookies in your browser settings, though some parts of the sites may not work as well. Our websites don't respond to Do Not Track signals, because there's no common standard for them yet. Inside HubSpot, our apps don't set their own advertising cookies. ## Where your information is stored We store and process information in the United States. If you're outside the United States, your information is transferred there. Where the GDPR or UK GDPR applies, we rely on the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism, for those transfers. ## How long we keep information We keep personal information only as long as we need it for the purposes in this policy: - Transactional Email send logs: 45 days - App data: while you use the app, then deleted 14 days after your subscription ends - Billing and invoice records: as long as tax and accounting law requires - Support conversations: as long as needed to help you, and to keep a record of what we agreed - Marketing preferences: until you unsubscribe, after which we keep only what's needed to honor your choice When we no longer need information, we delete it or make it anonymous. ## How we protect information We encrypt data in transit and at rest, limit access to the people who need it, keep secrets in a managed secrets store, and log access to our production systems. Each Transactional Email account sends through its own isolated configuration, so one account's sending can't affect another account's settings or suppression list. No system is completely secure, so we can't guarantee absolute security. If a breach affects your personal information, we'll tell you as the law requires. ## Children Our services are for businesses. We don't knowingly collect personal information from anyone under 18. If you think we have, email privacy@cambiumapps.com and we'll delete it. ## Your rights Depending on where you live, you may have the right to: - Find out what personal information we hold about you, and get a copy - Correct information that's wrong - Delete your information - Move your information to another service - Object to or restrict how we use it - Withdraw your consent, where we rely on it - Opt out of marketing emails **EEA, UK and Switzerland.** You can also complain to your local data protection authority. **California and other US states.** You have the right to know what personal information we collect, use and disclose, to delete or correct it, and to opt out of its sale or sharing for targeted advertising. We don't sell personal information or share it for targeted advertising. We won't treat you differently for using your rights. You can use an authorized agent to make a request, and we'll ask for proof that they're authorized. To make a request, email privacy@cambiumapps.com. We'll verify your identity by matching details you give us against our records, then respond within 30 days. If your request is about data our apps process for one of our customers, such as a contact who received a transactional email, we'll pass it to that customer and help them respond. You can also unsubscribe from our marketing emails with the link in any of them. You'll still get service messages about your account. ## Changes to this policy We'll update this policy when our practices or the law change, and we'll change the date at the top when we do. If a change is significant, we'll notify you by email or in the app before it takes effect. ## Contact us Email privacy@cambiumapps.com, or write to: Cambium Advisors LLC, DBA Cambium Apps  2160 Barranca Parkway #1110 Irvine, CA 92606 92606 © 2026 Cambium Apps | [Terms](https://www.cambiumapps.com/terms?hsLang=en) | [Privacy Policy](https://www.cambiumapps.com/privacy?hsLang=en)