The policy states that U.S. users who connect bank accounts for payment purposes have their banking credentials transmitted to Plaid, a third-party financial data service, and that Plaid processes their personal and financial data under Plaid's own privacy policy.
This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses that banking credentials entered during checkout are transmitted to a third party (Plaid) and processed under a separate privacy policy, meaning HubSpot's privacy protections do not govern this data once transmitted. Users must review Plaid's Privacy Policy separately to understand how their financial data is handled.
The updated policy now explicitly discloses that HubSpot collects Email Engagement Data (such as open, delivery, bounce, and click statuses) from emails sent through its Subscription Services using embedded tracking technologies. This represents formalization of a data collection practice into explicit policy language. However, the policy simultaneously removed a previously stated sentence directing users to a form for removing their personal data from HubSpot's commercial dataset. The updated terms do not indicate an alternative removal mechanism.
View change record →Under this clause, U.S. users who provide banking credentials during payment are subject to Plaid's data processing practices under Plaid's own privacy policy, which governs the financial data independently of HubSpot's policy. HubSpot's policy does not describe what data Plaid retains, how long it is held, or how it is used beyond payment validation.
Cross-platform context
See how other platforms handle Plaid Financial Data Integration and similar clauses.
Compare across platforms →"We use Plaid to securely connect to financial institutions across the U.S. To the extent you are based in the U.S., by entering online banking credentials for payment and completing checkout, your banking credentials are sent to Plaid for validation. Your personal and financial data is processed by Plaid in accordance with the Plaid Privacy Policy available at https://plaid.com/legal/#consumers.Excerpt from HubSpot's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses that banking credentials entered during checkout are transmitted to a third party (Plaid) and processed under a separate privacy policy, meaning HubSpot's privacy protections do not govern this data once transmitted. Users must review Plaid's Privacy Policy separately to understand how their financial data is handled.
Under this clause, U.S. users who provide banking credentials during payment are subject to Plaid's data processing practices under Plaid's own privacy policy, which governs the financial data independently of HubSpot's policy. HubSpot's policy does not describe what data Plaid retains, how long it is held, or how it is used beyond payment validation.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.