Pinnacle Data
Pinnacle Data Discovery for Slack, HubSpot, Zoom and Microsoft 365
Pinnacle Data helps established businesses find out what their operational data could be worth. Pinnacle Data Discovery is the first step: an intake form that asks how much data your company holds. If your company uses Slack, HubSpot, Zoom or Microsoft 365, an admin can connect each tool once and the form fills itself with counts and storage totals, read from that tool's own reports and records.
Using Google Workspace? Pinnacle Data Discovery for Google Workspace
What Pinnacle Data Discovery does
- Step 1
Connect
An admin clicks "Connect" on a tool's card on the Pinnacle Data Discovery portal and approves read-only access in that tool's own sign-in window.
- Step 2
Pre-fill
The portal reads the totals, fills them in on the card with a "From <tool>, as of <date>" tag, and its access ends.
- Step 3
Review and send
You check or edit every figure, add your contact details, and choose whether to send the form to Pinnacle.
Nothing is sent to Pinnacle until you click "Send to Pinnacle". You can also skip connecting entirely and type the figures in yourself.
What we read from each tool
Each tool asks you to approve the exact permissions below, in its own sign-in window. They are the permissions the portal requests, word for word.
Slack
A Slack Workspace Owner or Admin (an Org Owner or Org Admin for an Enterprise org).
What we read
- The number of full members and guests (bots and deactivated accounts left out)
- The number of active and archived public channels, and the year the oldest one was created
- The workspace's domain and plan
- If you tick "Also count files": the number of files and their total size
- On an Enterprise org: messages posted and files added, estimated from a sample of days over the last 12 months
The permissions we ask for
users:readView people in the workspace, so we can count members and guests and check that you are an Owner or Admin.
channels:readView basic information about public channels, so we can count them.
team:readView the workspace's name, email domain and icon.
team.billing:readRead the workspace's billing plan.
files:readOnly if you tick "Also count files"View files shared in channels and conversations. We read only the number of files and their sizes.
admin.analytics:readOnly when an Enterprise org is connected (together with channels:read and team:read)Access analytics data about the organization. We read only the number of messages posted and files added.
What they can't access
We never read, search, download or store messages, files, canvases or any other content, never call Slack's message history or search methods, and never ask for email addresses (users:read.email). Names and channel names are counted and discarded at once.
HubSpot
A HubSpot super admin, or a user with the HubSpot Marketplace access permission.
What we read
- The number of contacts, companies, deals and tickets
- The number of calls, meetings and notes, and, only if you tick "Also count logged emails", logged emails
- How many calls have a recording, how many HubSpot marks as having a transcript, and the hours of transcribed calls
- The year of the oldest record of each type
The permissions we ask for
oauthRequired by HubSpot for every app that connects with OAuth.
crm.objects.contacts.readRead contacts. In HubSpot this also covers calls, meetings and notes, which we count.
crm.objects.companies.readRead companies, which we count.
crm.objects.deals.readRead deals, which we count.
crm.objects.tickets.readRead tickets, which we count.
sales-email-readOptional, off by default: only if you tick "Also count logged emails"An optional permission, off by default: we only request it if you tick "Also count logged emails". HubSpot describes it as: "Grants access to read and manage one-to-one email engagements." HubSpot has no narrower permission for emails, and this one could read email content; we only count logged emails and read the oldest one's creation date.
What they can't access
We never read names, email addresses, phone numbers, notes, email or message content, call recordings, call transcripts or call summaries, and we never change or delete anything. HubSpot's read permissions technically allow reading record details, so the limit is in what our code requests: counts and dates only.
Zoom
The Zoom account owner or an admin. Meeting and recording figures need a Zoom Pro plan or higher.
What we read
- The number of users and licensed users
- The number of meetings, meeting minutes and meeting participants per month over the last 6 months, added up from Zoom's active hosts report (totals only)
- From recording file details only: the number of cloud recordings in the last 12 months, their total file size, and how many include an audio transcript
The permissions we ask for
user:read:user:adminView the profile of the person connecting, to see who connected and that they are an admin.
user:read:list_users:adminList users, so we can count users and licensed users.
report:read:list_users:adminView the active hosts report, so we can add up meetings, meeting minutes and participants per month. We keep only the totals.
cloud_recording:read:list_account_recordings:adminList the account's cloud recordings. We read only each recording's file types and sizes.
What they can't access
We never download, play or read any recording, transcript, chat, meeting summary or other content, and we never change anything.
Zoom user guide: adding, using and removing the app, troubleshooting and support
Microsoft 365
A Microsoft 365 administrator approves the app once for your organization. After that, anyone with the Global Reader or Reports Reader role can connect.
What we read
- Mailbox storage and the number of mailboxes
- OneDrive storage and SharePoint storage
- The number of Teams channel and chat messages over the last 180 days
- The number of active Microsoft 365 users
The permissions we ask for
openidYour basic sign-in identity.
emailYour email address, to show who connected.
profileYour basic profile, which Microsoft includes with sign-in.
Reports.Read.AllRead all usage reports (Microsoft Graph, read-only). Microsoft requires an administrator to approve it. We read only the totals.
What they can't access
We never read, open, copy or download any email, file, chat message, calendar entry, contact or other content, and this permission does not allow it. We do not read per-user report rows.
Totals only, never content
Pinnacle Data Discovery reads counts and sizes: how many members, records, meetings or messages, and how much storage. It never reads, opens, copies or downloads a message, file, recording, transcript or record's details.
Access ends right away
For Slack, HubSpot and Zoom, the access token is used once on our server to read the figures and revoked straight away. For Microsoft 365 the token is kept in your browser's memory, sent once to our server to read the report totals, then discarded; Microsoft offers no way to revoke it, so it expires on its own within about an hour. Tokens are never stored or logged.
Needs an admin
These figures cover the whole company, so each tool asks for an admin (or a reports role) to connect. Anyone else can type the figures in.
Using another tool? ConnectWise, or anything not listed here: type the figures in yourself on the portal. Nothing is connected.
Your data stays yours
We do not sell data from Slack, HubSpot, Zoom or Microsoft 365, use it for advertising, or share it with data buyers, AI labs or any other third party, and we never use it to train AI or machine learning models. Submitted forms are kept in a restricted Google Sheet and deleted on a fixed schedule. Our connected tools privacy notice explains exactly what we access, how we store it, and how to ask us to delete it.