California residents have the right to see, delete, or correct their personal data held by HubSpot, and can opt out of HubSpot selling or sharing their data with advertising partners. HubSpot cannot legally penalize you for exercising these rights.
This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The CCPA opt-out right for data sharing is particularly significant because HubSpot shares data with advertising partners for cross-context behavioral advertising, which qualifies as regulated sharing under CPRA even without a monetary sale.
California residents can opt out of HubSpot sharing their personal data with advertising partners by submitting a request through HubSpot's CCPA opt-out mechanism, and can also request deletion or correction of their personal information. HubSpot cannot reduce the quality of its services to you for exercising these rights.
How other platforms handle this
If you are a California resident, you have certain rights with respect to your personal information, including: The right to know about the personal information we collect, use, disclose, and sell. The right to delete your personal information. The right to opt out of the sale or sharing of your per...
California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...
If you are a California resident, you have the right to opt out of the sale or sharing of your personal information. You also have the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal informat...
Monitoring
HubSpot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights include the right to know what personal information we collect, the right to delete your personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal information, and the right not to be discriminated against for exercising your rights.— Excerpt from HubSpot's HubSpot Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages the CCPA as amended by the CPRA, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. CPRA's definition of 'sharing' personal data for cross-context behavioral advertising means that HubSpot's advertising partner data flows may trigger opt-out obligations regardless of whether monetary consideration is exchanged. Non-discrimination provisions under CCPA Section 1798.125 prohibit differential treatment for rights-exercising consumers. GOVERNANCE EXPOSURE: Medium. HubSpot's disclosure of CCPA rights is affirmatively compliant in structure, but operational compliance depends on the effectiveness of the opt-out mechanism, the 45-day response timeline, and the accuracy of data category disclosures. The CPPA has increased enforcement activity, and failure to honor opt-out requests or discriminate against rights-exercising consumers creates direct regulatory exposure. JURISDICTION FLAGS: This provision applies specifically to California residents. Other states with active privacy laws (Colorado, Virginia, Connecticut, Texas, Oregon, Montana) have analogous rights frameworks that may require HubSpot to extend similar mechanisms to residents of those states, though they are not explicitly addressed in this provision. CONTRACT AND VENDOR IMPLICATIONS: Business customers whose end users are California residents should ensure their own CCPA compliance programs account for personal data processed through HubSpot and that their privacy notices accurately describe HubSpot's role in data sharing for advertising. Service provider agreements with HubSpot should confirm that HubSpot does not use customer-provided data for its own business purposes in ways that would constitute a 'sale' under CCPA. COMPLIANCE CONSIDERATIONS: California-facing compliance teams should verify that HubSpot's opt-out mechanism is functional, conspicuously displayed, and processes requests within the 45-day statutory window. Records of opt-out requests should be maintained. Business customers should review whether HubSpot's advertising data flows affect their own CCPA obligations as controllers of end-user data.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The CCPA opt-out right for data sharing is particularly significant because HubSpot shares data with advertising partners for cross-context behavioral advertising, which qualifies as regulated sharing under CPRA even without a monetary sale.
California residents can opt out of HubSpot sharing their personal data with advertising partners by submitting a request through HubSpot's CCPA opt-out mechanism, and can also request deletion or correction of their personal information. HubSpot cannot reduce the quality of its services to you for exercising these rights.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.