121 Total
30 High severity
72 Medium severity
19 Low severity

Key Facts

When may HubSpot immediately suspend or terminate a customer's Subscription Service?
HubSpot may immediately suspend or terminate a customer's Subscription Service upon any violation of the Acceptable Use Policy.
Can HubSpot immediately suspend or terminate a customer's Subscription Service upon any violation of the Acceptable Use Policy?
HubSpot may immediately suspend or terminate a customer's Subscription Service upon any violation of the Acceptable Use Policy.
What are advertising networks allowed to collect?
HubSpot allows advertising networks to collect information about users' interactions with HubSpot websites in order to deliver personalized ads.
Why do advertising networks collect information about users' interactions with HubSpot websites?
HubSpot allows advertising networks to collect information about users' interactions with HubSpot websites in order to deliver personalized ads.
What data does HubSpot collect?
HubSpot collects business contact and similar professional data from publicly available sources, third-party providers, customers using enrichment features, and Email Engagement Data.
From where does HubSpot collect business contact and similar professional data?
HubSpot collects business contact and similar professional data from publicly available sources, third-party providers, customers using enrichment features, and Email Engagement Data.
With whom may HubSpot share Personal Data?
HubSpot may share Personal Data about individuals in its commercial dataset with customers that use HubSpot's enrichment features.
What customers may HubSpot share Personal Data with?
HubSpot may share Personal Data about individuals in its commercial dataset with customers that use HubSpot's enrichment features.
When may HubSpot use or disclose a user's Personal Data?
HubSpot reserves the right to use or disclose a user's Personal Data if required by law or if HubSpot reasonably believes use or disclosure is necessary to protect its rights, protect user or third-party safety, or investigate fraud.
What responsibility does HubSpot place on each customer?
HubSpot places on each customer the responsibility for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent for the information the customer processes using the Subscription Service.
Get alerted the next time HubSpot changes these terms. Follow HubSpot →
Summary

HubSpot collects professional data about individuals from public sources and third parties—even if those individuals have never directly interacted with HubSpot—and may share that data with HubSpot customers who use enrichment features. When you use HubSpot's products, your personal data may also be used to train HubSpot's AI models. Advertising networks collect behavioral data about you when you visit HubSpot's websites to serve you personalized ads.

Analysis

This document establishes HubSpot's data controller practices across two distinct contexts: processing personal data submitted through the Subscription Service (where HubSpot acts as processor on behalf of customers) and collecting and processing professional personal data for its own commercial dataset (where HubSpot acts as controller). As controller, HubSpot collects professional contact data from publicly available sources, third-party providers, enrichment customers, and Email Engagement Data, and may share that data with customers using enrichment features. HubSpot permits advertising networks to collect behavioral data from its websites to deliver personalized ads, and may process personal data to train its AI models and improve AI features through ordinary product use. The document further places compliance obligations for notice, disclosure, and consent regarding data processed through the Subscription Service entirely on the customer, not on HubSpot.

What this means for you

If your professional data appears in HubSpot's commercial dataset—collected from public sources, social media, third-party providers, or enrichment customers—it may be shared with other HubSpot customers for their sales and marketing purposes, and your activity on HubSpot's websites is made available to advertising networks for personalized advertising. Your personal data generated through product use may also be processed to train HubSpot's AI models. HubSpot provides a specific opt-out form through which you can request deletion of your personal data from its commercial dataset of professionals.

Institutional Analysis
Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

7 important changes detected

8 versions captured · Last updated: July 2026

July 2, 2026

medium
What changed HubSpot updated its privacy policy on July 2, 2026, making three operational changes: (1) renamed 'enrichment products' to 'enrichment features' throughout the policy; (2) added a new section describing how the company collects Email Engagement Data (open, delivery, bounce, and click statuses) from emails sent through HubSpot's Subscription Services using embedded tracking technologies; (3) removed a sentence that previously directed users to a form for removing their personal data from HubSpot's commercial dataset. The policy now includes email engagement tracking as an explicit data collection practice and consolidated references to the Tracking Code, but provides no new removal mechanism.
Why this matters The updated policy now explicitly discloses that HubSpot collects Email Engagement Data (such as open, delivery, bounce, and click statuses) from emails sent through its Subscription Services using embedded tracking technologies. This represents formalization of a data collection practice into explicit policy language. However, the policy simultaneously removed a previously stated sentence directing users to a form for removing their personal data from HubSpot's commercial dataset. The updated terms do not indicate an alternative removal mechanism.
View full change record →
What changed HubSpot's privacy policy document was updated on July 1, 2026, with one sentence modified in the navigation or product listing section. The change replaced 'AEO Sensor' with 'AI Search Sensor' in the product menu. This appears to be a product naming or rebranding change rather than a substantive privacy policy revision, and does not alter privacy rights, data processing practices, or user obligations.
Why this matters This change does not materially affect consumer privacy rights, data practices, or obligations. The updated language reflects a product name change from 'AEO Sensor' to 'AI Search Sensor' within the policy document's navigation section. No privacy-related practices, disclosures, or user controls have been modified.
View full change record →

June 17, 2026 low

HubSpot renamed one product offering in their privacy policy documentation on June 17, 2026. The product previously listed as 'Commerce Hub' is now referred to as 'Revenue Hub'. This change …

View change record →
May 14, 2026 low

HubSpot's privacy policy footer navigation was updated on May 14, 2026 to include two new product references ('HubSpot AEO' and 'AEO Sensor') and one new navigation link ('Sustainability'), while also …

View change record →
April 29, 2026 low

HubSpot removed 'Privacy Policy' from the navigation submenu under 'Legal Center for Customers' and added it instead under the 'Legal Center for Everyone' submenu on April 29, 2026. This is …

View change record →
April 23, 2026 low

HubSpot's privacy policy footer was updated on April 23, 2026, with minor removals from the navigation menu that appears at the bottom of their website. Specifically, references to 'Website Grader', …

View change record →
April 22, 2026 low

HubSpot's privacy policy document structure was updated on April 22, 2026, with minor changes to the legal center navigation menu. Specifically, the navigation reorganized where the Privacy Policy link appears …

View change record →
Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

121 provisions
12 featured
18 clause types
30 high severity
Privacy Rights 25 1 high
Show all 25 privacy rights provisions
Indemnification 1 1 high
Restricted or Prohibited Content/Industries 1 1 high
Monitoring

HubSpot has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Advertising partners collect data for targeted ads and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
Last Captured July 2, 2026 00:24 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000208
Version ID CA-V-004400
SHA-256 4d5a66e25bfa12c5fdbe17a2e7ff300a9737908683b4314d557c440379e28ebc
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Create free account Compare plans