HubSpot Privacy Policy

This document is HubSpot's privacy policy governing the collection, use, storage, and disclosure of personal data across HubSpot's websites, products, and services, with legal bases including consent, legitimate interests, and contractual necessity as described in the policy. The policy states that HubSpot collects identifiers (name, email address, phone number), company information, billing data, device and browser information, IP addresses, geolocation data, usage and activity data, and content submitted by users, and the terms authorize use of this data for product delivery, marketing communications, analytics, fraud prevention, and legal compliance. The policy discloses data sharing with service providers, advertising partners, social media platforms, resellers, and affiliates, and authorizes cross-border transfers of personal data outside the EEA using mechanisms including Standard Contractual Clauses. The policy engages GDPR for EU and EEA residents, the UK GDPR for UK residents, CCPA and CPRA for California residents, and references additional regional privacy frameworks; the document distinguishes between HubSpot acting as a data controller for visitor and prospect data and as a data processor for customer-submitted data processed within HubSpot's products. Material compliance considerations include the dual controller-processor role, which affects where data subject rights requests are directed, and the scope of marketing data shared with advertising and social media partners, which may require evaluation under GDPR consent and legitimate interest standards.