Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“Any violations of the Acceptable Use Policy by a customer can result in immediate suspension or termination of the Subscription Service.”
“We allow advertising networks to collect information about your interactions with our websites in order to deliver HubSpot's personalized ads. We may also share Personal Data, such as your email address, with our advertising partners...”
“We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud...”
“Each customer controls and is responsible for the information they process using the Subscription Service and for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent...”
“We may collect Personal Data about you from other sources, such as third party providers and publicly available sources (like social media platforms). This may include physical mail addresses, job titles, email addresses...”
“By using the Gmail integration with the Subscription Service you will grant the Subscription Service access to information associated with your account, including contacts, emails, calendar, distribution lists, subject lines, and URLs of tracked links...”
HubSpot collects professional data about individuals from public sources and third parties—even if those individuals have never directly interacted with HubSpot—and may share that data with HubSpot customers who use enrichment features. When you use HubSpot's products, your personal data may also be used to train HubSpot's AI models. Advertising networks collect behavioral data about you when you visit HubSpot's websites to serve you personalized ads.
This document establishes HubSpot's data controller practices across two distinct contexts: processing personal data submitted through the Subscription Service (where HubSpot acts as processor on behalf of customers) and collecting and processing professional personal data for its own commercial dataset (where HubSpot acts as controller). As controller, HubSpot collects professional contact data from publicly available sources, third-party providers, enrichment customers, and Email Engagement Data, and may share that data with customers using enrichment features. HubSpot permits advertising networks to collect behavioral data from its websites to deliver personalized ads, and may process personal data to train its AI models and improve AI features through ordinary product use. The document further places compliance obligations for notice, disclosure, and consent regarding data processed through the Subscription Service entirely on the customer, not on HubSpot.
If your professional data appears in HubSpot's commercial dataset—collected from public sources, social media, third-party providers, or enrichment customers—it may be shared with other HubSpot customers for their sales and marketing purposes, and your activity on HubSpot's websites is made available to advertising networks for personalized advertising. Your personal data generated through product use may also be processed to train HubSpot's AI models. HubSpot provides a specific opt-out form through which you can request deletion of your personal data from its commercial dataset of professionals.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
9 important changes detected
11 versions captured · Latest change detected by ConductAtlas: September 2026
HubSpot updated its privacy policy on July 2, 2026, making three operational changes: (1) renamed 'enrichment products' to 'enrichment features' throughout the policy; (2) added a new section describing how …
View change record →HubSpot's privacy policy document was updated on July 1, 2026, with one sentence modified in the navigation or product listing section. The change replaced 'AEO Sensor' with 'AI Search Sensor' …
View change record →HubSpot renamed one product offering in their privacy policy documentation on June 17, 2026. The product previously listed as 'Commerce Hub' is now referred to as 'Revenue Hub'. This change …
View change record →HubSpot's privacy policy footer navigation was updated on May 14, 2026 to include two new product references ('HubSpot AEO' and 'AEO Sensor') and one new navigation link ('Sustainability'), while also …
View change record →HubSpot removed 'Privacy Policy' from the navigation submenu under 'Legal Center for Customers' and added it instead under the 'Legal Center for Everyone' submenu on April 29, 2026. This is …
View change record →HubSpot's privacy policy footer was updated on April 23, 2026, with minor removals from the navigation menu that appears at the bottom of their website. Specifically, references to 'Website Grader', …
View change record →HubSpot's privacy policy document structure was updated on April 22, 2026, with minor changes to the legal center navigation menu. Specifically, the navigation reorganized where the Privacy Policy link appears …
View change record →“We allow advertising networks to collect information about your interactions with our websites in order to deliver HubSpot's personalized ads. We may also share Personal Data, such as your email address, with our advertising partners...”
“Any violations of the Acceptable Use Policy by a customer can result in immediate suspension or termination of the Subscription Service.”
“We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud...”
“Each customer controls and is responsible for the information they process using the Subscription Service and for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent...”
“We may collect Personal Data about you from other sources, such as third party providers and publicly available sources (like social media platforms). This may include physical mail addresses, job titles, email addresses...”
“By using the Gmail integration with the Subscription Service you will grant the Subscription Service access to information associated with your account, including contacts, emails, calendar, distribution lists, subject lines, and URLs of tracked links...”
“HubSpot also acts as a controller when we collect and process personal data about individuals in their professional capacity, and make that information available to customers for their own sales, marketing...”
“To opt out and delete your personal data from our commercial dataset of professionals, please fill out this form.”
“When you use our products and services we may process personal data to develop, support, and improve HubSpot AI features and to train our AI models and similar products and services that rely on machine learning.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
HubSpot has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Advertising partners collect data for targeted ads and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.