A cloud-based customer relationship management (CRM) and marketing automation platform that provides tools for sales, marketing, customer service, and content management to businesses of all sizes. The company processes extensive customer data including contact information, website interactions, email communications, and business analytics across its integrated software suite. Their terms of service and privacy policy are significant for users because they govern how personal and business data is collected, stored, shared, and used across HubSpot's ecosystem of marketing and sales tools.

2 Documents
53 All provisions 11 High severity 36 Medium severity 6 Low severity
8 Changes · 12 mo
May 14, 2026 Last change

High — provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium — provisions worth knowing about but with partial protections or limited scope. Low — standard terms with minimal consumer impact.

Governance Coverage
Privacy Rights
24 provisions · 4 high · 17 med
Data Usage
6 provisions · 4 high · 2 med
Payment Fees
4 provisions · 2 high · 2 med
Enforcement Actions
3 provisions · 3 med
Liability Limitation
3 provisions · 1 high · 2 med
Acceptable Use
2 provisions · 2 med
Data Collection
2 provisions · 2 med
Indemnification
2 provisions · 1 high · 1 med
Legal Jurisdiction
2 provisions · 1 med
Platform Discretion
2 provisions · 1 med
Key Governance Provisions
High Controller vs. Processor Distinction

This provision establishes a bifurcated data governance structure in which data subject rights requests for customer-submitted data must be directed to HubSpot's business customers, not to HubSpot di…

High Customer Responsibility for Contact Data Legality

This provision places the legal compliance burden for Contact Data on the Customer as data controller, creating direct exposure under GDPR, CCPA, and other applicable privacy laws if data is transfer…

High Dual Controller/Processor Framework

This provision determines who is responsible for your data and who you can hold accountable. If a company stored your email address in HubSpot without your knowledge, your legal rights run against th…

High Data Processing Agreement Incorporation

The DPA governs GDPR and CCPA compliance for personal data processed through HubSpot, and its terms and obligations are legally binding even though they are in a separate document that many customers…

High Limitation of Liability

For businesses whose operations depend heavily on HubSpot, the actual financial impact of a serious service failure or data incident could far exceed twelve months of subscription fees, leaving signi…

Document Coverage
Privacypolicy Termsofservice
Last change detected: May 14, 2026 Changes (12 months): 8 Documents monitored: 2 Provisions tracked: 53
Compare With Similar Platforms
ActiveCampaign Airtable Amazon Marketplace Amplitude Apple App Store Asana Auth0 Box

Documents

HubSpot Privacy Policy

Medium

This is HubSpot's privacy policy covering how the company collects and uses personal data from visitors to its websites, users of its software products, and contacts of HubSpot customers. The …

Last updated May 5, 2026 · Privacy policy
10 provisions 5 versions captured Version history →

HubSpot Terms of Service

Medium

HubSpot's Customer Terms of Service govern access to and use of HubSpot's software products including its CRM, marketing, sales, and service hubs by business customers. The agreement states that HubSpot …

Last updated May 5, 2026 · Terms of service
9 provisions 5 versions captured Version history →
📈 Policy Drift Analysis View all changes →

High Severity Provisions (5)

View all high severity provisions → Compare HubSpot with other platforms →

Applicable Regulations

EU AI Act
European Union
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
Colorado AI Act
US-CO
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Texas AI Act
Texas, USA
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗

Compare with Similar Platforms

ActiveCampaign
platform
Airtable
platform
Amazon Marketplace
platform
Amplitude
platform
Apple App Store
platform
Asana
platform
Auth0
platform
Box
platform

Frequently Asked Questions

What HubSpot documents does ConductAtlas track?

ConductAtlas tracks 2 HubSpot documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has HubSpot made in the past year?

HubSpot has made 8 policy changes in the past 12 months across the documents ConductAtlas tracks.

How many provisions has ConductAtlas classified for HubSpot?

ConductAtlas has classified 53 provisions across HubSpot's tracked documents. 11 are rated high severity, 36 medium, and 6 low.

Can I get alerts when HubSpot changes their policies?

Yes. Monitor subscribers ($19/month) can add HubSpot to their watchlist and receive same-day email alerts whenever any tracked document changes.