This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Individuals may have Personal Data collected by HubSpot from sources they did not knowingly provide it to, including public social media profiles.
Interpretive note: The excerpt lists specific data types that may be collected (physical mail addresses, job titles, email addresses, etc.), which are additional details omitted from the canonical claim and recorded in omitted_material.
The updated policy now explicitly discloses that HubSpot collects Email Engagement Data (such as open, delivery, bounce, and click statuses) from emails sent through its Subscription Services using embedded tracking technologies. This represents formalization of a data collection practice into explicit policy language. However, the policy simultaneously removed a previously stated sentence directing users to a form for removing their personal data from HubSpot's commercial dataset. The updated terms do not indicate an alternative removal mechanism.
View change record →Your Personal Data may be collected by HubSpot from sources other than your own direct interactions with HubSpot, including third-party providers and public social media platforms.
How other platforms handle this
We may receive Personal Data in the form of Technical Data and Usage Data about you from various third parties, such as analytics providers or advertising networks.
telemetry information collected includes: (i) microservice settings, (ii) usage data and (iii) hardware environment.
Some of our ad partners may also enable us to collect similar data directly from their website or app by integrating our or our affiliates' advertising technology.
"We may collect Personal Data about you from other sources, such as third party providers and publicly available sources (like social media platforms). This may include physical mail addresses, job titles, email addresses...Excerpt from HubSpot's Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Individuals may have Personal Data collected by HubSpot from sources they did not knowingly provide it to, including public social media profiles.
Your Personal Data may be collected by HubSpot from sources other than your own direct interactions with HubSpot, including third-party providers and public social media platforms.
ConductAtlas has identified this type of provision across 296 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.