The policy states that HubSpot may send marketing communications about third-party products and services using personal information, and provides opt-out by unsubscribe link or email to privacy@hubspot.com.
This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes use of personal information for third-party promotional communications, which engages CAN-SPAM Act requirements in the US and GDPR consent or legitimate interests analysis for EU users, as well as CASL for Canadian users.
Under this provision, HubSpot may send promotional emails about third-party products and services to users; users may opt out at any time by using the unsubscribe mechanism in those communications or by contacting privacy@hubspot.com.
How other platforms handle this
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
Depending on where you live, you may have certain rights with respect to your personal information, such as the right to request access, correction, or deletion of your personal information, or to opt out of the sale or sharing of your personal information. If you are a California resident, you have...
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
Monitoring
HubSpot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may use your personal information to send you promotional information about third parties' products and services. You can opt-out of receiving this type of communication by following the unsubscribe instructions in any such communications or by contacting us at privacy@hubspot.com.— Excerpt from HubSpot's HubSpot Privacy Policy
1. REGULATORY LANDSCAPE: This provision engages the CAN-SPAM Act for US-based recipients, GDPR consent requirements for EU recipients of marketing communications, and Canada's CASL for Canadian recipients. The FTC enforces CAN-SPAM compliance. Where third-party promotional use constitutes processing for direct marketing purposes, GDPR Article 21 provides an unconditional right to object. 2. GOVERNANCE EXPOSURE: Low to Medium. Third-party promotional communications are a disclosed practice with an available opt-out mechanism. EU compliance depends on whether marketing to EU users is based on consent or legitimate interests, and whether the opt-out mechanism is sufficiently prominent. 3. JURISDICTION FLAGS: EU and EEA users may have stronger opt-out rights under GDPR Article 21 (object to direct marketing) than the policy's opt-out language alone suggests. Canadian users may have additional rights under CASL. California users may have CCPA disclosure rights related to sharing data with third parties for promotional purposes. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations that have shared contact lists or CRM data with HubSpot should confirm whether that data could be used for HubSpot's own marketing purposes, which would require evaluation under their own data processing agreements. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that marketing opt-out requests submitted to privacy@hubspot.com are processed within CAN-SPAM's 10-business-day requirement, and that EU users' objections to direct marketing are treated as absolute and not subject to a balancing test.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes use of personal information for third-party promotional communications, which engages CAN-SPAM Act requirements in the US and GDPR consent or legitimate interests analysis for EU users, as well as CASL for Canadian users.
Under this provision, HubSpot may send promotional emails about third-party products and services to users; users may opt out at any time by using the unsubscribe mechanism in those communications or by contacting privacy@hubspot.com.
ConductAtlas has identified this type of provision across 17 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.