The policy states that California residents have rights under the CCPA and CPRA to know, delete, and opt out of the sale or sharing of their personal information, and have a right to non-discrimination for exercising these rights.
This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision documents HubSpot's CCPA and CPRA compliance posture for California residents and establishes the non-discrimination guarantee, which is a statutory requirement under CPRA.
California residents may submit requests to know what personal data HubSpot has collected, request deletion, and opt out of data sale or sharing for cross-context behavioral advertising purposes, with HubSpot stating it will not discriminate against users who exercise these rights.
How other platforms handle this
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Monitoring
HubSpot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have the right to know what personal information we have collected about you, the right to delete personal information we have collected, the right to opt-out of the sale or sharing of your personal information, and the right not to be discriminated against for exercising these rights.— Excerpt from HubSpot's HubSpot Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages the CCPA as amended by the CPRA, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. The non-discrimination requirement is codified in the CPRA. The FTC may also have concurrent jurisdiction for unfair or deceptive practices in this context. 2. GOVERNANCE EXPOSURE: Medium. The provision addresses opt-out of sale and sharing, which requires HubSpot to maintain a functional Do Not Sell or Share mechanism. Organizations using HubSpot as a marketing platform should assess whether HubSpot's data sharing practices on their behalf may constitute a sale or sharing under CPRA from the organization's own CCPA compliance perspective. 3. JURISDICTION FLAGS: This provision applies specifically to California residents. Virginia, Colorado, Connecticut, Texas, and other states with comprehensive consumer privacy laws have enacted similar rights frameworks, though those rights are addressed through general privacy rights language rather than California-specific provisions in this policy. 4. CONTRACT AND VENDOR IMPLICATIONS: B2B customers using HubSpot for marketing should confirm whether HubSpot's service provider agreement qualifies as a service provider relationship under CPRA or whether any data flows would constitute a sale or sharing requiring a separate opt-out mechanism. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that HubSpot's Do Not Sell or Share opt-out mechanism is accessible and functional for California users, and should confirm that response timelines for CCPA rights requests align with CPRA's 45-day statutory response window.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision documents HubSpot's CCPA and CPRA compliance posture for California residents and establishes the non-discrimination guarantee, which is a statutory requirement under CPRA.
California residents may submit requests to know what personal data HubSpot has collected, request deletion, and opt out of data sale or sharing for cross-context behavioral advertising purposes, with HubSpot stating it will not discriminate against users who exercise these rights.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.