This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
HubSpot's designation as controller for this data means HubSpot bears legal responsibility for how that professional personal data is collected and processed before it is shared with customers.
Interpretive note: The excerpt is truncated and may contain additional purposes or conditions beyond sales and marketing that were not included in the quoted language. The canonical claim reflects only what the quoted excerpt establishes.
The updated policy now explicitly discloses that HubSpot collects Email Engagement Data (such as open, delivery, bounce, and click statuses) from emails sent through its Subscription Services using embedded tracking technologies. This represents formalization of a data collection practice into explicit policy language. However, the policy simultaneously removed a previously stated sentence directing users to a form for removing their personal data from HubSpot's commercial dataset. The updated terms do not indicate an alternative removal mechanism.
View change record →Your professional personal data may be collected and processed by HubSpot acting as the data controller, making it available to HubSpot's customers for sales and marketing purposes.
How other platforms handle this
authorize ZipRecruiter to connect your account to the account of a "Connected Site" (e.g., Google, LinkedIn, Monster, Facebook or Twitter), we may be able to access information you have provided to the Connected Site...
telemetry information collected includes: (i) microservice settings, (ii) usage data and (iii) hardware environment.
Some of our ad partners may also enable us to collect similar data directly from their website or app by integrating our or our affiliates' advertising technology.
Monitoring
HubSpot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"HubSpot also acts as a controller when we collect and process personal data about individuals in their professional capacity, and make that information available to customers for their own sales, marketing...— Excerpt from HubSpot's HubSpot Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
HubSpot's designation as controller for this data means HubSpot bears legal responsibility for how that professional personal data is collected and processed before it is shared with customers.
Your professional personal data may be collected and processed by HubSpot acting as the data controller, making it available to HubSpot's customers for sales and marketing purposes.
ConductAtlas has identified this type of provision across 300 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.