Privacy policy — HubSpot Service Hub

Cited by

Facts read from this source

• Policy last modified Report an error

  “Last Modified: April 14, 2026”

• DPA included Report an error

  “we act as a processor (or service provider) on behalf of our customers (who are controllers of personal data) under the HubSpot Data Processing Agreement included in the Customer Terms of Service.”

• Eea UK controller entity Report an error

  “If you are a website visitor located in the European Economic Area ("EEA") or United Kingdom ("UK"), HubSpot Ireland Limited is the data controller of your Personal Data.”

• International transfer mechanisms Report an error

  “we rely upon the the Standard Contractual Clauses (approved by the European Commission and Swiss authorities) and UK Addendum to the Standard Contractual Clauses (approved by the UK authorities) where required.”

• Canada transfer mechanism Report an error

  “For transfers to or from Canada, we make use of the standard contractual clauses. With respect to personal data received from or transferred to Canada, HubSpot is subject to the regulatory enforcement powers of the Office of the Privacy Commissioner of Canada.”

• Data privacy framework Report an error

  “HubSpot complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce (collectively “the Data Privacy Framework”).”

• Dpf ftc jurisdiction Report an error

  “The U.S. Federal Trade Commission (FTC) has jurisdiction over HubSpot’s compliance with the DPF Principles. HubSpot is subject to the investigatory and enforcement powers of the FTC.”

• Dpf complaint response days Report an error

  “We will investigate and attempt to resolve any DPF Principles-related complaints within 45 days.”

• Encryption Report an error

  “We also have additional safeguards where appropriate (such as commercial industry standard secure encryption methods to protect customer data at rest and in transit, TLS for HubSpot hosted sites, web application firewall protection, and other appropriate contractual and organizational measures)”

• Affiliates as subprocessors Report an error

  “we may transfer information that may include Personal Data to other HubSpot Affiliates who act as subprocessors, where we have operations for the purposes described in this policy.”

• Plaid Report an error

  “We use Plaid to securely connect to financial institutions across the U.S.”

• AI training Report an error

  “When you use our products and services we may process personal data to develop, support, and improve HubSpot AI features and to train our AI models and similar products and services that rely on machine learning.”

• Enrichment commercial dataset Report an error

  “HubSpot collects business contact and similar professional data from various sources, including publicly available sources, third party providers, and customers who use our enrichment products. This information powers our commercial dataset.”

• Tracking code Report an error

  “Our Customers may install the HubSpot Tracking Code on their website to collect information about website visitors.”

• Third party integrations Report an error

  “You may connect third party integrations to your HubSpot account, which may ask for certain permissions to access data or send information to your HubSpot account.”

• Call recording Report an error

  “If you have a call scheduled with a HubSpot representative, we may record and transcribe the call.”

• Retention policy Report an error

  “When we have no ongoing legitimate business need to process your Personal Data, we securely delete the information or anonymize it or, if this is not possible, securely store your Personal Data and isolate it from any further processing until deletion is possible.”

• User privacy rights Report an error

  “You can request access, correction, updates or deletion of your Personal Data.”

• Privacy request channel Report an error

  “for HubSpot, including our websites and product or services, please use the HubSpot Privacy Request Form;”

• Hustle contact Report an error

  “for the Hustle, please contact us at privacy@thehustle.co.”

• Privacy contact email Report an error

  “For all HubSpot brands (including the Hustle), you may also write to us by e-mail at privacy@hubspot.com.”

• Optout mechanism required Report an error

  “requires the inclusion in every email sent using the Subscription Service of an "opt-out" mechanism and other required information.”

• California rights Report an error

  “This section applies only to California consumers. For purposes of this section "Personal Information" has the meaning given in the California Consumer Privacy Act (“CCPA”).”

• Trust center Report an error

  “For more on Security at HubSpot, please see https://trust.hubspot.com/.”

• Policy change notification Report an error

  “We will post any Privacy Policy changes on this page and, if the changes are material, notify you directly (for example, by sending you an email notification).”

Scores citing this record

• The Agent Advocate Customer data protection
• The Agent Advocate European sovereignty
• The Agent Advocate Customer data protection
• The Agent Advocate Integrations & API
• The Agent Advocate European sovereignty
• The Agent Advocate Customer data protection
• The Agent Advocate Integrations & API
• The Agent Advocate European sovereignty
• The Agent Advocate Customer data protection
• The Agent Advocate Integrations & API
• The Agent Advocate European sovereignty
• The Agent Advocate European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer Integrations & API
• The Data Protection Officer European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer Integrations & API
• The Data Protection Officer European sovereignty
• The Data Protection Officer Customer data protection
• The Data Protection Officer European sovereignty
• The Data Protection Officer European sovereignty
• The Shop Operator Customer data protection
• The Shop Operator Integrations & API
• The Shop Operator European sovereignty
• The Shop Operator Customer data protection
• The Shop Operator Integrations & API
• The Shop Operator European sovereignty
• The Shop Operator Channels in one queue
• The Shop Operator Customer data protection
• The Shop Operator Integrations & API
• The Shop Operator European sovereignty
• The Shop Operator Customer data protection
• The Shop Operator Integrations & API
• The Shop Operator European sovereignty
• The Shop Operator Customer data protection
• The Shop Operator Integrations & API
• The Shop Operator European sovereignty
• The Shop Operator European sovereignty
• The Integrator Customer data protection
• The Integrator Integrations & API
• The Integrator European sovereignty
• The Integrator Customer data protection
• The Integrator Integrations & API
• The Integrator European sovereignty
• The Integrator Customer data protection
• The Integrator Integrations & API
• The Integrator European sovereignty
• The Integrator Customer data protection
• The Integrator Integrations & API
• The Integrator European sovereignty
• The Integrator Customer data protection
• The Integrator Integrations & API
• The Integrator European sovereignty
• The Integrator Customer data protection
• The Integrator European sovereignty
• The Skeptic Customer data protection
• The Skeptic European sovereignty
• The Skeptic Customer data protection
• The Skeptic Integrations & API
• The Skeptic European sovereignty
• The Skeptic Customer data protection
• The Skeptic Integrations & API
• The Skeptic European sovereignty
• The Skeptic Customer data protection
• The Skeptic Integrations & API
• The Skeptic European sovereignty
• The Skeptic Customer data protection
• The Skeptic Integrations & API
• The Skeptic European sovereignty
• The Skeptic European sovereignty
• The Support Lead Customer data protection
• The Support Lead Integrations & API
• The Support Lead European sovereignty
• The Support Lead Customer data protection
• The Support Lead Integrations & API
• The Support Lead European sovereignty
• The Support Lead Customer data protection
• The Support Lead Integrations & API
• The Support Lead European sovereignty
• The Support Lead Customer data protection
• The Support Lead Integrations & API
• The Support Lead European sovereignty
• The Support Lead Customer data protection
• The Support Lead Integrations & API
• The Support Lead European sovereignty
• The Support Lead Customer data protection
• The Support Lead European sovereignty