Provision record
HubSpot · HubSpot Privacy Policy · View original document ↗

Data collected from third-party and public sources

High severity High confidence Common · 297 of 352 platforms

Key Facts · in the document’s own words

From where may HubSpot collect Personal Data?
“We may collect Personal Data about you from other sources, such as third party providers and publicly available sources (like social media platforms). This may include physical mail addresses, job titles, email addresses...”
Version CA-V-006998, captured Sept. 17, 2026 · live source ↗
Our reading, not the document’s words
HubSpot may collect Personal Data about individuals from third-party providers and publicly available sources such as social media platforms.
Stay ahead of the changes
Track HubSpot and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Individuals may have Personal Data collected by HubSpot from sources they did not knowingly provide it to, including public social media profiles.

⚠

Interpretive note: The excerpt lists specific data types that may be collected (physical mail addresses, job titles, email addresses, etc.), which are additional details omitted from the canonical claim and recorded in omitted_material.

Recent Activity

This document changed recently

Medium Aug 27, 2026

The updated policy removes email engagement tracking (email opens, clicks, bounces) from HubSpot's data collection practices, meaning this category of behavioral data will no longer be collected through emails sent via HubSpot's platform. The policy now explicitly authorizes individuals to request removal of their personal data from HubSpot's commercial dataset by completing and submitting a form. You can submit a data removal request through the form referenced in the policy to have your information removed from HubSpot's commercial dataset.

View change record →

Consumer impact (what this means for users)

Your Personal Data may be collected by HubSpot from sources other than your own direct interactions with HubSpot, including third-party providers and public social media platforms.

How other platforms handle this

Stripe Medium

we collect information from publicly available sources, third parties (such as credit bureaus), and via the Services we offer.

Instacart Medium

Partners who have implemented or integrated certain Instacart services on their websites or applications may also let us collect information about your use of their sites or applications or share such information with us.

Lyft Medium

If you are a Driver, we also collect mobile sensor data from your device (such as speed, direction, height, acceleration, deceleration, and other technical data).

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
We may collect Personal Data about you from other sources, such as third party providers and publicly available sources (like social media platforms). This may include physical mail addresses, job titles, email addresses...

Excerpt from HubSpot's Privacy Policy

Applicable regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
HubSpot Privacy Policy
Entity
HubSpot
Date stated by the document
Sept. 16, 2026
As printed in HubSpot’s text (version CA-V-006998), not a ConductAtlas date.
Tracking information
First captured by ConductAtlas
April 18, 2026
Text quoted from version
CA-V-006998, captured Sept. 17, 2026
Record ID
CA-P-033243
Document ID
CA-D-000208
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006998)
b7583a8a86a6d2caf13bf3478c646491a5196de156c75b0973cfefc2fb5b6d53
Analysis generated
July 9, 2026 08:57 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006998, captured Sept. 17, 2026 (checked Oct. 5, 2026)
Citation Record
Entity: HubSpot
Document: HubSpot Privacy Policy
Record ID: CA-P-033243
Version: CA-V-006998
Captured: 2026-09-17 00:32:05 UTC
SHA-256: b7583a8a86a6d2ca…
URL: https://conductatlas.com/platform/hubspot/hubspot-privacy-policy/provision/CA-P-033243/data-collected-from-third-party-and-public-sources/
Accessed: Oct. 12, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does HubSpot's Data collected from third-party and public sources clause do?

Individuals may have Personal Data collected by HubSpot from sources they did not knowingly provide it to, including public social media profiles.

How does this clause affect you?

Your Personal Data may be collected by HubSpot from sources other than your own direct interactions with HubSpot, including third-party providers and public social media platforms.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 297 platforms. See the full comparison.

Is ConductAtlas affiliated with HubSpot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.