Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
HubSpot's policy indicates potential data misuse risks, as third-party integrations can broadly access and modify user data, and HubSpot disclaims responsibility for their practices (risk_flags-1). Furthermore, HubSpot actively builds a commercial dataset from various sources for sales and marketing use by its customers without explicit upfront consent (data_use-1), and tracking code data from customer websites is also used for HubSpot's own commercial purposes (data_use-2). Additionally, personal data may be processed for AI model training (data_use-3), and calls with representatives may be recorded and transcribed (data_use-4), although an opt-out is offered.
85% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
Critical issues that could lead to significant user harm, including material financial loss, privacy violations, or limitations on legal recourse.
high95% confidence
Third-party integrations can access and modify your data
Granting permissions to third-party integrations allows them to access, view, store, and modify your HubSpot account data. HubSpot is not responsible for the practices of these third-party integrations.
Why it matters: Your HubSpot account data, including sensitive information, may be viewed, stored, and modified by third-party applications if you grant them permissions. HubSpot explicitly states they are not responsible for the practices of these third-party integrations, potentially leaving you without recourse for data misuse by these parties.
Any permission(s) granted by you, grants these third parties access to your data, which may include (but is not limited to) granting third party applications access to view, store, and modify your HubSpot account data. We are not responsible for the practices of third party integrations, so please carefully review the permissions you grant to third party applications.
WHAT INFORMATION WE COLLECT AND PROCESS, paragraph 22 · Citation strength: strong
Data Use
Practices concerning the collection, processing, and sharing of user data, including for marketing, analytics, and third-party partnerships.
medium90% confidence
Personal data collected from various sources to build commercial dataset
HubSpot collects business contact and professional data from public sources, third-party providers, and customers using enrichment products to power its commercial dataset. This information is then provided to customers for their sales, marketing, and business activities.
Why it matters: Your professional information, potentially including sensitive business contacts, may be collected from various public and third-party sources to be included in HubSpot's commercial dataset. This dataset is then shared with other customers for their sales and marketing efforts, meaning your data could be used for outreach you did not directly consent to.
HubSpot collects business contact and similar professional data from various sources, including publicly available sources, third party providers, and customers who use our enrichment products. This information powers our commercial dataset. We provide information from our commercial dataset to customers who choose to use enrichment products within the Subscription Services as part of their sales, marketing, and other business activities.
WHAT INFORMATION WE COLLECT AND PROCESS, paragraph 29 · Citation strength: strong
medium90% confidence
Tracking code data used by HubSpot for its own purposes
HubSpot's tracking code, installed by customers on their websites, collects information like IP addresses and online identifiers from website visitors. HubSpot uses this data for its own purposes as a controller to improve products and services, including its commercial dataset.
Why it matters: When you visit a website that has installed the HubSpot tracking code, information about your visit, including your IP address and online identifiers, is collected. This data is then used by HubSpot for its own business purposes, including improving its products and commercial dataset, which means your browsing data contributes to HubSpot's commercial activities without direct consent.
Our Customers may install the HubSpot Tracking Code on their website to collect information about website visitors. HubSpot uses information collected by the tracking code, such as IP addresses and online identifiers, to improve our products and services, including our commercial dataset. We store information about website visitors on our servers and process this data for our own purposes as a controller.
WHAT INFORMATION WE COLLECT AND PROCESS, paragraph 31 · Citation strength: strong
low85% confidence
Use of personal data for AI model training
HubSpot may process personal data to develop, support, and improve HubSpot AI features and to train its AI models and similar machine learning products and services.
Why it matters: Your personal data may be used to train and improve HubSpot's artificial intelligence and machine learning models. While not explicitly stated as harmful, the use of your data for AI training could lead to unexpected applications or biases within the AI systems, and you might not have direct control or visibility over this specific use.
When you use our products and services we may process personal data to develop, support, and improve HubSpot AI features and to train our AI models and similar products and services that rely on machine learning.
HOW WE USE PERSONAL DATA, paragraph 6 · Citation strength: strong
medium85% confidence
Call recording and transcription may occur without explicit consent
HubSpot may record and transcribe calls with a HubSpot representative and will notify you prior to the call, offering an opportunity to opt out. However, if the call is scheduled by a representative, it can be recorded.
Why it matters: When you have a call with a HubSpot representative, the call may be recorded and transcribed. Although you will be notified and given a chance to opt-out, the default is to record, meaning sensitive conversations could be captured and analyzed without proactive refusal on your part.
If you have a call scheduled with a HubSpot representative, we may record and transcribe the call. You will be notified prior to the call that the call is being recorded, and you will be offered an opportunity to opt-out of having the call recorded.
HOW WE USE PERSONAL DATA, paragraph 12 · Citation strength: strong
Cancellation & Renewal
Terms related to subscription management, including automatic renewals, cancellation processes, and refund policies.
Not clearly stated: There is no information explicitly detailing automatic renewal clauses, cancellation processes, notice periods for cancellation, or refund policies.
Gotchas
Potentially overlooked clauses that could disadvantage users, such as one-sided terms, disclaimers of liability, or challenging dispute resolution processes.
✓
Looking good
No hidden gotchas
Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.
Protections
Explicit commitments and features that benefit the user, enhancing their rights, privacy, or control over their data and services.
Not clearly stated: No explicit protective or consumer-friendly commitments such as under-18 non-collection/deletion, clear refund windows, advance notice before material changes, meaningful user deletion/export controls, or explicit data-minimization commitments were found.
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.