Privacy policy — HubSpot Service Hub

Cited by

Facts read from this source

• Dpf certification Report an error

  “HubSpot complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce”

• Scc transfers Report an error

  “we rely upon the the Standard Contractual Clauses (approved by the European Commission and Swiss authorities) and UK Addendum to the Standard Contractual Clauses (approved by the UK authorities) where required”

• DPA included Report an error

  “we act as a processor (or service provider) on behalf of our customers (who are controllers of personal data) under the HubSpot Data Processing Agreement included in the Customer Terms of Service.”

• Eea controller Report an error

  “If you are a website visitor located in the European Economic Area ("EEA") or United Kingdom ("UK"), HubSpot Ireland Limited is the data controller of your Personal Data.”

• Plaid Report an error

  “We use Plaid to securely connect to financial institutions across the U.S. To the extent you are based in the U.S., by entering online banking credentials for payment and completing checkout, your banking credentials are sent to Plaid for validation.”

• AI training Report an error

  “When you use our products and services we may process personal data to develop, support, and improve HubSpot AI features and to train our AI models and similar products and services that rely on machine learning.”

• Enrichment commercial dataset Report an error

  “HubSpot collects business contact and similar professional data from various sources, including publicly available sources, third party providers, and customers who use our enrichment products. This information powers our commercial dataset.”

• Tracking code controller Report an error

  “HubSpot uses information collected by the tracking code, such as IP addresses and online identifiers, to improve our products and services, including our commercial dataset. We store information about website visitors on our servers and process this data for our own purposes as a controller.”

• Retention Report an error

  “When we have no ongoing legitimate business need to process your Personal Data, we securely delete the information or anonymize it or, if this is not possible, securely store your Personal Data and isolate it from any further processing until deletion is possible.”

• Encryption safeguards Report an error

  “We also have additional safeguards where appropriate (such as commercial industry standard secure encryption methods to protect customer data at rest and in transit, TLS for HubSpot hosted sites, web application firewall protection, and other appropriate contractual and organizational measures)”

• Ftc dpf enforcement Report an error

  “The U.S. Federal Trade Commission (FTC) has jurisdiction over HubSpot’s compliance with the DPF Principles. HubSpot is subject to the investigatory and enforcement powers of the FTC.”

• Dpf complaint resolution days Report an error

  “We will investigate and attempt to resolve any DPF Principles-related complaints within 45 days.”

• Canada opc Report an error

  “With respect to personal data received from or transferred to Canada, HubSpot is subject to the regulatory enforcement powers of the Office of the Privacy Commissioner of Canada.”

• Affiliate subprocessors Report an error

  “we may transfer information that may include Personal Data to other HubSpot Affiliates who act as subprocessors, where we have operations for the purposes described in this policy. Please see Annex 3 of our Customer Data Processing Agreement for a list of impacted HubSpot Affiliates and their locations.”

• Privacy contact email Report an error

  “For all HubSpot brands (including the Hustle), you may also write to us by e-mail at privacy@hubspot.com.”

• Advertising data sales CCPA Report an error

  “In the preceding 12 months, we have “sold” or “shared” (as defined under the CCPA) certain information, including identifiers, to our advertising partners.”

• Sensitive data limitation Report an error

  “We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.”

• Call recording optout Report an error

  “If you have a call scheduled with a HubSpot representative, we may record and transcribe the call. You will be notified prior to the call that the call is being recorded, and you will be offered an opportunity to opt-out of having the call recorded.”

• Last modified Report an error

  “Last Modified: September 16, 2026”

Scores citing this record

• The Agent Advocate Customer data protection
• The Agent Advocate European sovereignty
• The Agent Advocate Customer data protection
• The Agent Advocate European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer European sovereignty
• The Shop Operator Customer data protection
• The Shop Operator European sovereignty
• The Shop Operator Customer data protection
• The Shop Operator European sovereignty
• The Integrator Customer data protection
• The Integrator European sovereignty
• The Integrator Customer data protection
• The Integrator European sovereignty
• The Skeptic Customer data protection
• The Skeptic European sovereignty
• The Skeptic Customer data protection
• The Skeptic European sovereignty
• The Support Lead Customer data protection
• The Support Lead European sovereignty
• The Support Lead Customer data protection
• The Support Lead European sovereignty