Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
HubSpot's policy indicates that third-party integrations can extensively access and modify your account data, and the company is not responsible for these third parties (risk_flags-1). They may also disclose your personal data to public authorities without notice for national security or law enforcement (risk_flags-2). Your indirectly collected professional data may be used for sales and marketing by customers (data_use-1), and personal data is used to train HubSpot's AI models. Log files, including IP addresses, are associated with your personal data. Additionally, content posted in public forums may remain after account termination (gotchas-1).
89% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
2 findings
Critical issues and red flags found in the policy.
high95% confidence
Third-Party Integrations Can Access and Modify Your Data
Any permissions you grant to third-party integrations can allow these third parties to access, store, and modify your HubSpot account data. HubSpot is not responsible for the practices of these third-party integrations.
Why it matters: Third-party integrations you authorize may view, store, and modify your HubSpot account data. HubSpot explicitly states it is not responsible for the practices of these third-party integrations.
Any permission(s) granted by you, grants these third parties access to your data, which may include (but is not limited to) granting third party applications access to view, store, and modify your HubSpot account data. We are not responsible for the practices of third party integrations, so please carefully review the permissions you grant to third party applications.
WHAT INFORMATION WE COLLECT AND PROCESS, paragraph 22 · Citation strength: strong
medium90% confidence
Data Disclosure to Public Authorities Without Notice
HubSpot may be required to disclose your Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Why it matters: Your personal data may be disclosed to public authorities for national security or law enforcement purposes without prior notification to you.
Please note that under certain circumstances, we may be required to disclose your Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
HOW WE TRANSFER PERSONAL DATA INTERNATIONALLY, paragraph 11 · Citation strength: strong
Data Use
1 finding
How the company uses your personal data, including for marketing, sharing, and analytics.
medium95% confidence
Information Collected Indirectly Can Be Used for Sales and Marketing
HubSpot acts as a controller when it collects and processes personal data about individuals in their professional capacity, and makes that information available to customers for their own sales, marketing, and other business activities. This includes personal data collected indirectly from publicly available sources, customers, or other third parties.
Why it matters: Your personal data, even if collected indirectly from public sources or third parties, can be made available to HubSpot's customers for their sales and marketing activities.
HubSpot also acts as a controller when we collect and process personal data about individuals in their professional capacity, and make that information available to customers for their own sales, marketing, and other business activities. This includes personal data we may collect indirectly about you, such as from publicly available sources, our customers, or other third parties.
Details on how to cancel services, automatic renewals, and refund eligibility.
?
Not clearly stated
No cited billing terms — wording is unclear
The policy does not explicitly state details about automatic renewals, cancellation procedures beyond marketing communications, or specific refund eligibility.
Gotchas
1 finding
Potentially overlooked clauses that could be unfavorable to the user.
medium90% confidence
Posts in Public Forums May Remain After Account Termination
If you directly disclose any information through public message boards, blogs, or forums, it may be read, collected, and used by any member of the public. Your posts and certain profile information may remain even after you terminate your account.
Why it matters: Information you post in public forums may remain publicly accessible and associated with your profile even after you terminate your account.
Please keep in mind that if you directly disclose any information through our public message boards, blogs, or forums (including profile information associated with the account you use to post the information) it may be read, collected and used by any member of the public who accesses these websites. Your posts and certain profile information may remain even after you terminate your account.
HOW WE SHARE PERSONAL DATA, paragraph 8 · Citation strength: strong
Protections
3 findings
Commitments and features that benefit the user.
Protection95% confidence
Option to Remove Data from Commercial Dataset
You can opt out and delete your personal data from HubSpot's commercial dataset of professionals by filling out a provided form.
Why it helps: This allows users to control whether their professional data is included in HubSpot's commercial dataset, providing a clear mechanism for removal.
To opt out and delete your personal data from our commercial dataset of professionals, please fill out this form .
When there is no ongoing legitimate business need to process your personal data, HubSpot will securely delete or anonymize it. They will delete this information at an earlier date if you request it, as described in the 'Privacy Rights and Choices' section.
Why it helps: Users can request earlier deletion of their personal data when there is no longer a legitimate business need for its retention, giving them control over their data's lifecycle.
When we have no ongoing legitimate business need to process your Personal Data, we securely delete the information or anonymize it or, if this is not possible, securely store your Personal Data and isolate it from any further processing until deletion is possible. We will delete this information at an earlier date if you so request, as described in the "Privacy Rights and Choices" section.
HOW WE STORE AND SECURE PERSONAL DATA, paragraph 4 · Citation strength: strong
Protection95% confidence
No Knowing Collection or Sharing of Children's Personal Data Under 16
HubSpot's websites, products, and services are not intended for or targeted at children under 16, and they do not knowingly or intentionally collect Personal Data about children under 16. If such data is believed to be collected, it can be reported for deletion.
Why it helps: This commitment protects children under 16 by not knowingly collecting their personal data, and provides a mechanism to report and delete any such data if inadvertently collected.
HubSpot's websites, products, and services are not intended for or targeted at children under 16, and we do not knowingly or intentionally collect Personal Data about children under 16. If you believe that we have collected Personal Data about a child under 16, please contact us here , so that we may delete the information.
OTHER IMPORTANT PRIVACY INFORMATION, paragraph 1 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.