Connect HubSpot
Connecting HubSpot puts your live pipeline into KeystoneIQ: open deals, the companies and contacts on them, deal owners, and the notes and activity on each deal where your HubSpot access allows. Briefs then reflect what is in flight, deals get linked to the competitors named in their notes, and you can open a deal-specific brief from inside HubSpot. Available on Starter, Growth, and Pro.
Connecting takes about a minute. Only a workspace owner can connect or disconnect HubSpot.
Before you connect: what HubSpot will show you
HubSpot shows its own permission screen before it hands anything to KeystoneIQ. Expect to see:
- "Connecting KeystoneIQ to HubSpot, by keystoneiq.ai". The publisher line should read keystoneiq.ai. If it shows any other domain, stop and contact support@keystoneiq.ai.
- A red warning: "This app could put your data at risk. KeystoneIQ hasn't been verified by HubSpot." HubSpot shows this for every app that is not yet listed in the HubSpot App Marketplace, and KeystoneIQ is not listed yet. It is about the marketplace review, not a finding about KeystoneIQ. Before you continue, check that Redirect domain on that screen reads keystoneiq.ai. Then type I accept the risk in the box and click Connect. If the redirect domain is anything else, stop and contact support@keystoneiq.ai.
- On some accounts, an amber note instead: "This app hasn't been reviewed or approved by HubSpot." Same meaning; check the publisher reads keystoneiq.ai and continue.
- The permissions KeystoneIQ asks for. All of them are read access:
| Permission | Why KeystoneIQ needs it |
|---|---|
| Deals | Open and closed deals, stages, and amounts, so briefs and deal risk reflect your pipeline |
| Companies | The accounts on each deal |
| Contacts | The people on each deal |
| Owners | Deal owner names instead of numeric IDs |
| Basic account info | Which HubSpot portal is connected |
| Campaigns (optional) | View-only campaign names and attributed revenue |
KeystoneIQ does not ask to change anything in HubSpot when you first connect. Write access is a separate, later step that you choose to turn on (see Writing back to HubSpot, below).
You need to be able to install apps in the HubSpot portal you connect. If HubSpot says you don't have permission, ask a HubSpot Super Admin to connect, or to give your HubSpot user app install rights.
Connect in three steps
- In KeystoneIQ, open Settings > Connections. Under CRMs, find HubSpot and click Connect.
- Read the summary of what KeystoneIQ reads and click Connect HubSpot.
- On HubSpot's screen, choose your portal, check the publisher reads keystoneiq.ai, and click Connect app.
You land back in Settings with HubSpot marked Connected, and the first sync starts straight away. A first sync usually takes a few minutes, longer for large portals.
What syncs depends on your HubSpot user's role: KeystoneIQ sees what the connecting user can see. To limit what is shared, connect with a dedicated HubSpot user whose access is scoped to the pipelines you want. Once connected, synced deals are visible to every member of your KeystoneIQ workspace.
When KeystoneIQ syncs
- On connect: a full first sync.
- Weekly: every Sunday, so Monday's brief has fresh pipeline context.
- On demand: Sync now on the HubSpot card in Settings (up to twice an hour).
Add the KeystoneIQ card to your deal records
The KeystoneIQ Brief card shows a deal-specific competitive brief on each HubSpot deal record (Starter and above). HubSpot does not place app cards automatically, so a HubSpot Super Admin (or a user who can edit record layouts) adds it once for the whole portal:
- In HubSpot, click the settings icon, then Integrations > Connected apps > KeystoneIQ.
- Open App cards, then Manage locations.
- Tick the deal record view and click Save.
Open any deal and the card appears in the right sidebar.
Writing back to HubSpot
Write-back is off by default. When you turn it on, KeystoneIQ can add a brief to a deal as a note (Starter and above), and on Growth and Pro it can write deal-risk scores and competitor alerts to deals.
- In Settings > Connections, turn on CRM writeback.
- Click Allow write access in HubSpot. HubSpot shows its permission screen again, this time asking for deal write access. Approve it.
If you turn write-back off later, KeystoneIQ stops writing straight away. To remove the write permission itself, disconnect and connect again.
Disconnect
In Settings > Connections, click Disconnect on the HubSpot card. Syncing stops, the stored HubSpot tokens are deleted, and the deal card stops loading. You can also uninstall KeystoneIQ from HubSpot under settings > Integrations > Connected apps.
Troubleshooting
| What you see | What to do |
|---|---|
| "This app could put your data at risk" (type "I accept the risk") | Expected until KeystoneIQ is listed in the HubSpot App Marketplace. Check the redirect domain reads keystoneiq.ai, type the phrase, and click Connect. |
| "This app hasn't been reviewed or approved by HubSpot" | Same as above, shown on some accounts. Check the publisher reads keystoneiq.ai and continue. |
| HubSpot says you can't install apps | Ask a HubSpot Super Admin to connect, or to grant your user app install permission. |
| The Connect button is missing in KeystoneIQ | Only workspace owners can connect integrations. Use Email owner on the card to ask yours. |
| HubSpot card shows Reconnect needed | The connection expired or was removed in HubSpot. An owner clicks Reconnect HubSpot and approves again. Your synced data is kept. |
| Deal owners show as numbers | Your connection predates the owners permission. Disconnect and connect again once. |
| "HubSpot is connected read-only" when adding a brief to a deal | Turn on CRM writeback and click Allow write access in HubSpot (owner only). |
| The deal card doesn't appear on deals | A HubSpot admin needs to add it once (see above). |
Questions: support@keystoneiq.ai.