Security and privacy
Your business data moves through these systems, so how it's handled matters. Here is what we do, which tools touch your data, and what we ask of you.
How we protect your data
Least access
We connect with the narrowest permissions a workflow needs, using a dedicated sign-in or API key per client where the tool allows it. We don't ask for your passwords.
Secrets stay in a vault
Credentials live in the automation platform's encrypted credential store, never in code, documents, or chat. Access is limited to the people who maintain your systems.
Separate by client
Each client gets their own records, folders, and workflows. Your information isn't mixed into another client's project.
Monitored and maintained
Workflows are monitored, and failures raise an alert so problems get fixed before they turn into missing data. Maintenance plans keep integrations current as the tools around them change.
Encrypted in transit
Traffic to this website and between the services we connect uses HTTPS/TLS.
No data selling
We don't sell your data or use it for advertising. We use it to build and run the systems you hired us for.
Where your data lives
We build on established platforms rather than running our own servers. Your data is handled under each provider's own security program and terms.
| Tool | What it's used for |
|---|---|
| Cloudflare Workers | Runs our custom-built automations that move data between your tools, and your client portal. |
| Notion | Our internal records: projects, documentation, and client contacts. |
| Google Workspace | Email, calendar, and document storage for client files and meetings. |
| Cloudflare | Delivers this website and the client portal and protects them from abusive traffic. |
| Your own tools | The systems we integrate (accounting, CRM, scheduling) stay where they are. We connect to them; we don't copy them wholesale. |
Website forms and chat
When you send a request or book a call, we store the details you enter (name, company, email, phone, and your message) so we can respond. The site's chat assistant is an AI. Messages you type to it may be processed by Google's Gemini service to generate replies. Please don't share passwords, payment card numbers, or other sensitive information with it.
Payments
We don't store card or bank account numbers. When online payments are offered, they're handled by a payment processor.
Working with your systems
- We document what we build and which accounts it touches, and you keep ownership of your data.
- We're happy to sign a mutual NDA before discovery.
- When an engagement ends, we help you hand off or shut down access, and remove our credentials from your accounts.
- If we learn of a security incident that affects your data, we'll tell you promptly and explain what happened.
What helps on your side
- Give us a dedicated login or API key we can revoke, rather than a personal password.
- Turn on two-factor authentication for the accounts we connect.
- Tell us when someone who had access leaves your team.
Questions or data requests
To ask what we hold about you, correct it, or request deletion, email hello@hutsonintegrated.com. To report a security concern, use the same address and put "Security" in the subject.
Last updated October 1, 2026. This page describes our practices and is not a contract. Specific terms are set out in each client agreement.