HubSpot Privacy Policy (original) (raw)
HubSpot is committed to protecting your privacy. This Privacy Policy applies to the personal data we collect and process in the course of our business. HubSpot acts in different ways when processing data:
- HubSpot acts as a controller of your personal data when you sign up for our products and services, visit our websites or interact with us through other channels (for example in person events). We use this data for a variety of purposes, including to provide our products and services to you, contact you about relevant content, and improve and promote our products and services.
- HubSpot acts as a processor when our customers use our products and services to collect and process personal data in connection with their sales, marketing, and other business activities. In this case, we act as a processor (or service provider) on behalf of our customers (who are controllers of personal data) under the HubSpot Data Processing Agreement included in the Customer Terms of Service.
- HubSpot also acts as a controller when we collect and process personal data about individuals in their professional capacity, and make that information available to customers for their own sales, marketing, and other business activities. This includes personal data we may collect indirectly about you, such as from publicly available sources, our customers, or other third parties. For more information see the “What Information We Collect and Process” section.
For the purposes of this Privacy Policy "Personal Data" means any information relating to an identified or identifiable individual. This Privacy Policy describes your choices and rights with respect to your Personal Data, including your rights of access and correction.
- For information about how to exercise your privacy rights when HubSpot acts as a controller of personal data, please see the “Your Privacy Rights and Choices” section.
- To opt out and delete your personal data from our commercial dataset of professionals, please fill out this form
- If you wish to exercise your privacy rights regarding Personal Data we process on behalf of a customer, please refer to the customer policies and contact the customer directly.
We update this Privacy Policy from time to time and encourage you to review this Privacy Policy periodically. We will post any Privacy Policy changes on this page and, if the changes are material, notify you directly (for example, by sending you an email notification). Terms not otherwise defined in this Privacy Policy have the meaning given to them in the HubSpot Customer Terms of Service.
- What Information We Collect and Process
- How We Use Personal Data
- How We Share Personal Data
- How We Transfer Personal Data Internationally
- How We Store and Secure Personal Data
- Cookies and Similar Technologies
- Your Privacy Rights and Choices
- California Privacy Rights
- Other Important Privacy Information
- Google Integrations
- Contact Us
1. What Information We Collect and Process
1.1 Information You Provide to HubSpot
When you interact with us via our websites or any sites or services that link to this Privacy Policy (including theHustle.co, and Connect.com) or use the Subscription Service, we may collect Personal Data and other information from you, as further described below.
1.1.1 When You Visit Our Websites
We collect Personal Data from you when you submit web forms or interact with our websites, for example by subscribing to a HubSpot blog, signing up for a webinar, subscribing to one of our services or requesting customer support. We may ask for your email address, first and last name, job title, and other similar business information. You are free to explore some of our websites without providing any Personal Data about yourself.
1.1.2 INBOUND and Other Event Information
When you register for INBOUND or a HubSpot event, we collect information such as name, address, phone number, and email address. We use this information to communicate with you and in some cases facilitate your registration. Additionally, we may share your registration data with service providers of INBOUND in order to provide event information and improve your experience at INBOUND or future HubSpot events.
1.1.3 Account and User Information
We collect Personal Data when you sign-up for a HubSpot account, create or modify user information, set preferences, or provide any other related information to access or utilize our Subscription Service.
1.1.4 Payment Information
We collect payment and billing information when you register for paid products or services. For example, we may ask you to provide a billing address, or a billing contact for your HubSpot account. If you give us payment information, we use it solely as authorized by you in accordance with this Privacy Policy.
1.1.5 Customers may also provide payment information, such as a credit card number or bank account numbers, when purchasing products or services. We use secure third-party payment service providers to manage payment processing, which is collected through a secure payment process.
1.1.6 Testimonials
We may post testimonials and comments on our websites, which may contain Personal Data.
1.2 Information We Process on Behalf of Customers When They Use the Subscription Service
Our product, or the Subscription Service, allows our customers to create and share marketing, sales and customer service content. When customers use our product, they may process Personal Data such as first and last name, email address, physical address, phone number, or other information about you. We call the information that our customers submit or collect via the product ‘Customer Data’ under our Customer Terms of Service.
We generally store and process information about and on behalf of our customers on our servers as a processor (or service provider) based on a customer’s instructions and in accordance with our Customer Terms of Service. Each customer controls and is responsible for the information they process using the Subscription Service and for complying with any regulations or laws that require providing notice, disclosure, and/or obtaining consent prior to transferring the Personal Data to HubSpot for processing purposes.
If you have questions about the Personal Data we process on behalf of a customer, please contact the customer directly and refer to their policies.
1.3 Information We Collect and Process When You Use the Subscription Service
1.3.1 Usage Data
We collect usage data when you or your users in your HubSpot account interact with the Subscription Service. Usage data includes metrics and information regarding your use and interaction with the Subscription Service such as what product features you use the most, when an object (like a ticket) is opened and closed, and how often certain features (like workflows) are triggered in your account.
We engage third party providers to collect usage data. For more information about how we protect your information with these service providers, please see the"How We Share Personal Data" section.
1.3.2 Mobile
When you access or use the Subscription Service via our mobile applications, we automatically collect information such as your device model and version, operating system, or device identifiers.
1.3.3 Log Files
Like most websites and technology services delivered over the Internet, we automatically collect and store information about your computer hardware and software when you visit our websites, use our product and services, or visit other sites or services that link to this Privacy Policy. This information can include your IP address, browser type, domain names, internet service provider (ISP), and the files viewed on our websites (e.g., HTML pages, graphics, etc.), the files viewed on our, or our customer’s websites (if those websites are hosted on HubSpot e.g. HTML pages or, graphics etc.), your operating system, access times and referring website addresses.
When you use the Subscription Service, we collect and store the categories of information listed above in logs in the following instances, subject to the customer’s implementation settings:
- When a HubSpot User logs into their account and accesses tools in the HubSpot Platform;
- When an individual visits a customer’s website, if the website is hosted by our product and services; or
- When an individual visits a customer’s website, if the customer’s website is self-hosted, if the customer uses our plug-ins, and the customer uses HubSpot scripts and content (such as embedded forms).; or
- Third-party features and content from other companies. Our websites may include features and widgets (such as the share and/or "like" button or interactive mini-programs) that run on our websites. These features may collect your IP address, which page you are visiting on our sites, and may set a cookie to enable the feature to function properly. These features and widgets are either hosted by a third party or hosted directly on our websites.
1.3.4 Third Party Integrations
You may connect third party integrations to your HubSpot account, which may ask for certain permissions to access data or send information to your HubSpot account. It is your responsibility to review any third party integrations you authorize. We may collect information about what types of integrations you use in your HubSpot account.
Any permission(s) granted by you, grants these third parties access to your data, which may include (but is not limited to) granting third party applications access to view, store, and modify your HubSpot account data. We are not responsible for the practices of third party integrations, so please carefully review the permissions you grant to third party applications. For more information on integrations with third party providers, please see the "Connect apps to HubSpot" knowledge base article.
1.4 Information We Collect From Other Sources
1.4.1 HubSpot Partners
We may receive information about you, or Users of your HubSpot Account (if applicable), from our global network of partners. We may receive this data through a number of ways, including through our deal and lead registration processes.
We may also collect information about you through our partner co-marketing partnerships. For example, you may sign up to a webinar or download a white paper published by HubSpot and a HubSpot co-marketing partner. You can read more information about our co-marketing program at https://www.hubspot.com/co-marketing-request-form. For more information about how we share data with our partners, review the "Partners" subsection of the "How We Share Personal Data" provision of this privacy policy.
1.4.2 Third Parties
We may receive information from third party service providers, from related companies, and from our business and solution partners.
1.4.3 Personal Data from Different Sources
We may collect Personal Data about you from other sources, such as third party providers and publicly available sources (like social media platforms). This may include physical mail addresses, job titles, email addresses, phone numbers, IP addresses, and social media profiles. This helps us to update and improve our products, services, and records, identify new customers, create more personalized advertising, suggest products and services that may interest you, deliver personalized communications, and promote events.
1.4.4 Other HubSpot Companies and Affiliates
We may receive information about you from other companies that are owned or operated by HubSpot.
1.5 Information We Collect and Process in Connection with Our Enrichment Products
HubSpot collects business contact and similar professional data from various sources, including publicly available sources, third party providers, and customers who use our enrichment products. This information powers our commercial dataset.. We provide information from our commercial dataset to customers who choose to use enrichment products within the Subscription Services as part of their sales, marketing, and other business activities.
If you’d like to remove your Personal Data from our commercial dataset, complete and submit this form. For more information about how to exercise your privacy rights and choices, please see the “Your Privacy Rights and Choices” section for more information.
1.6 Information We Collect and Process via the HubSpot Tracking Code
Our Customers may install the HubSpot Tracking Code on their website to collect information about website visitors. HubSpot uses information collected by the tracking code, such as IP addresses and online identifiers, to improve our products and services, including our commercial dataset. We store information about website visitors on our servers and process this data for our own purposes as a controller. Please see this knowledge base article to learn more about data sharing with HubSpot.
2. How We Use Personal Data
2.1 To Communicate with You About the Product and Services
We use the account information you provide to HubSpot when signing up for our products and services, to send you transactional emails or in-app notification about billing, account management, and other administrative matters.
We use your information to provide customer support, such as resolving technical issues you encounter and analyzing product outages or bugs.
If you use the HubSpot mobile applications, we may send you push notifications from time to time in order to update you about events and promotions. If you no longer wish to receive such communications, you may turn them off at the device level.
2.2 To Provide the Subscription Service
We use your account information and Customer Data to provide the product and services to you. For example, we use the email address you provide when signing up for the product to create your user account, and we use your payment information to process payments for paid use of the Subscription Service. We also use this information to authenticate you when you log in and to provide customer support.
2.3 To Improve and Develop Our Product and Services
We use professional data, log files, and usage data about how you or your users interact with our product and services to develop and improve our products and services. For example, we use usage data to assess trends and usage across the product to help us determine what new features or integrations our users may be interested in.
We may use Customer Data for machine learning that supports certain products and development of features and functionality with the Subscription Service and similar products and services. For example, machine learning helps power the business card scanner tool if you use our mobile apps and allows for easier imports of data into your HubSpot account. You may opt out of having your Customer Data used for machine learning by following the instructions on the Opt out of HubSpot's machine learning data use knowledge base article.
We may publish data about how our product and services are being used across our customer base. When we share statistical information externally in this way, the data will be aggregated and we will not identify individual users or customers. For example, we may publish blog posts on trends or insights into how users are interacting with our product.
2.4 To Secure and Protect our Product and HubSpot Users
We use your account information to investigate and help prevent security incidents. We may also use this information to meet legal requirements. We use your information to verify user accounts, new product sign-ups, and to detect and prevent product abuse. This includes enforcing our Acceptable Use Policy.
We use log files to provide general statistics regarding use of the websites by you, including how you use our websites, what country you are logging in from (for analytics, export control and regulatory purposes) and to help improve the navigation experience. Your IP addresses are also collected and logged for security and debugging purposes, for example to track access patterns, investigate security events and incidents. For these purposes we associate automatically-collected data to other personal data provided by you such as name, email address, address, and phone number.
2.5 To Market and Promote the Subscription Service
We use Personal Data to advertise, market, and promote our products, services, and other offerings. For example, we use information like your email or physical address to send information or HubSpot content to you we think may be of interest to you, including by post, email, or other means. We may also send you marketing communications relating to our business.
You may opt out of receiving this promotional content by following the instructions contained in each communication that we send to you. If you unsubscribe from our marketing lists, we will continue to contact you regarding administrative matters, and to respond to your requests.
We may reach out to you via telephone to ask about other HubSpot products or services you may be interested in. If you have a call scheduled with a HubSpot representative, we may record and transcribe the call. You will be notified prior to the call that the call is being recorded, and you will be offered an opportunity to opt-out of having the call recorded. We may also reach out to you via SMS, and you will be offered an opportunity to opt out of those communications.
Where required by law, we will only send marketing communications with your consent. Otherwise, we will market and advertise our products and services on the basis of our legitimate business interests.
We may use information collected from third party service providers and other sources in combination with other information we collect through other means described in this Privacy Policy for the purposes of providing you with updates and improved services, personalized communications, event promotion, and to otherwise improve the user experience.
2.6 Other Purposes if We Obtain Your Consent
We may use your data for other purposes when you give us consent to do so.
2.7 Legal Basis for Processing Personal Data (EEA and UK visitors only)
If you are a website visitor located in the European Economic Area ("EEA") or United Kingdom ("UK"), HubSpot Ireland Limited is the data controller of your Personal Data. HubSpot's Data Protection Officer can be contacted here.
Our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which we collect it. However, we will normally collect Personal Data from you only where we have your consent to do so, where we need the Personal Data to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect Personal Data from you.
If we ask you to provide Personal Data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your Personal Data is mandatory or not (as well as of the possible consequences if you do not provide your Personal Data). Similarly, if we collect and use your Personal Data in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.
3. How We Share Personal Data
3.1 Service Providers
We may share Personal Data with our third party service providers to support our websites, products, and services. For example, we use service providers for data hosting, application development, marketing, sales support and customer support. We may need to share your information with service providers to provide information about products or services to you. Examples may include removing repetitive information from prospect lists, analyzing data or performing statistical analysis on your use of the Subscription Service or interactions on our websites, providing marketing assistance, processing credit card payments, supplementing the information you provide us in order to provide you with better service, developing and improving the product and services, and providing customer service or support. These service providers are prohibited from using your Personal Data except for these purposes, and they are required to maintain the confidentiality of your information. In all cases where we share your information in this way, we explicitly require the third party service providers to acknowledge and adhere to our privacy and data protection policies and standards.
3.2 Partners
We may share your personal data with trusted HubSpot partners to: (i) contact you based on your communication preferences; (ii) help us perform statistical analysis; (iii) provide sales support; (iv) provide customer support; and (v) to improve our partner programs and Subscriptions Services. Partners are prohibited from using your Personal Data except for these purposes, and they are required to maintain the confidentiality of your data.
We also partner with trusted third parties to provide you with co-marketing content that we think may be relevant to you. When you engage with these co-marketing partners, we will tell you who we are sharing data with, and provide a link to the co-marketing partner’s privacy policy so you can learn more about how to opt-out of the partner’s communications. These co-marketing partners are required to adhere to our privacy and data protection policies. For more information on our co-marketing program, see this page.
3.3 Advertising Partners
We allow advertising networks to collect information about your interactions with our websites in order to deliver Hubspot’s personalized ads. We may also share Personal Data, such as your email address, with our advertising partners to deliver Hubspot’s personalized ads on other companies' sites or mobile apps. You can opt out of having your data disclosed to our advertising partners through this form.
3.4 Corporate Events
If we (or our assets) are acquired by another company, whether by merger, acquisition, bankruptcy or otherwise, that company would receive all information gathered by HubSpot on the websites and the Subscription Service. In this event, you will be notified via email and/or a prominent notice on our website, of any change in ownership, uses of your Personal Data, and choices you may have regarding your Personal Data.
3.5 Public Forums
Our websites may offer publicly accessible message boards, blogs, and community forums (e.g., HubSpot Community, Connect.com, etc.). Please keep in mind that if you directly disclose any information through our public message boards, blogs, or forums (including profile information associated with the account you use to post the information) it may be read, collected and used by any member of the public who accesses these websites. Your posts and certain profile information may remain even after you terminate your account. We urge you to consider the sensitivity of any information you may disclose in this way. We will correct or delete any information you have posted on the websites if you so request, as described in the"Your Privacy Rights and Choices" section of this Privacy Notice. In some cases, we may not be able to remove your information; we will let you know if we are unable to and why, if permitted.
3.6 Compelled Disclosure
We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process. If you use the Subscription Service, Customer Data is considered Confidential Information and you should review the Confidentiality terms in the Customer Terms of Service for more information. HubSpot shares data about requests for customer information, to learn more see our Data Disclosure and Transparency Report.
3.7 HubSpot, Other Companies, and Affiliates
We may share your Personal Data with our current and future parents, Affiliates, subsidiaries, and other entities under common control and ownership to the extent necessary to fulfill your request or for other purposes permitted under this Privacy Policy.
3.8 HubSpot Customers in Connection with Our Enrichment Products
We may share Personal Data about individuals in our commercial dataset with our customers that use our enrichment products. Customers may use this information for their sales and marketing activities. We rely on our legitimate interests, as well as those of our customers, to collect and share data for the purposes listed. HubSpot’s and our customers’ legitimate interests are not more important than your privacy rights, and we process your data on the basis that people would expect their work-related data to be shared in this way. See the “Information We Collect and Process In Connection With Our Enrichment Products” section for more information.
4. How We Transfer Personal Data Internationally
4.1 International Transfers within the HubSpot Group
To facilitate our global operations, we may transfer information that may include Personal Data to other HubSpot Affiliates who act as subprocessors, where we have operations for the purposes described in this policy. Please see Annex 3 of our Customer Data Processing Agreement for a list of impacted HubSpot Affiliates and their locations.
This Privacy Policy will apply even if we transfer Personal Data to other countries. We have taken appropriate safeguards to require that your Personal Data will remain protected wherever it is transferred. When we share Personal Data of individuals in the European Economic Area ("EEA"), Switzerland or the United Kingdom ("UK") within and among HubSpot’s Affiliates, we rely upon the the Standard Contractual Clauses (approved by the European Commission and Swiss authorities) and UK Addendum to the Standard Contractual Clauses (approved by the UK authorities) where required. We also have additional safeguards where appropriate (such as commercial industry standard secure encryption methods to protect customer data at rest and in transit, TLS for HubSpot hosted sites, web application firewall protection, and other appropriate contractual and organizational measures), as described more in detail in the HubSpot Trust Center.
4.2 International Transfers to Third Parties
Some of the third parties described in this Privacy Policy, which provide services to us under contract, are based in other countries that may not have equivalent privacy and data protection laws to the country in which you reside. When we share Personal Data of individuals in the EEA, Switzerland or UK with third parties, we use a variety of legal mechanisms to safeguard the transfer including the European Commission-approved Data Privacy Framework Standard Contractual Clauses, as well as additional safeguards where appropriate. For transfers to or from the United Kingdom, we make use of the UK Addendum. For transfers to or from Canada, we make use of the standard contractual clauses. With respect to personal data received from or transferred to Canada, HubSpot is subject to the regulatory enforcement powers of the Office of the Privacy Commissioner of Canada. Please contact us if you need more information about the legal mechanisms we rely on to transfer personal data outside the EEA, Switzerland, Canada, and UK.
4.3 Data Privacy Framework Notice
HubSpot complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce (collectively “the Data Privacy Framework”).
HubSpot has certified to the U.S. Department of Commerce that it adheres to the EU-US DPF Principles with regard to the processing of Personal Data received from the European Union, and the United Kingdom (and Gibraltar) and to the Swiss-US DPF Principles with regard to the processing of Personal Data received from Switzerland. If there is any conflict between this Privacy Policy and the DPF Principles, the DPF Principles will govern. To learn more about the Data Privacy Framework, and to view our certification, please visit https://www.dataprivacyframework.gov/.
If you are located in the EU, UK or Switzerland, you have the right to request access to the Personal Data that we hold about you and request that we correct, amend or delete your Personal Data if it is inaccurate or processed in violation of the DPF Principles. We will give you an opportunity to opt out where Personal Data we control about you is to be disclosed to an independent third party or used for a purpose that is materially different from those set out in this Privacy Policy. If you would like to exercise any of your rights, please contact us via the details provided below.
In compliance with the DPF Principles, HubSpot commits to resolve DPF Principles-related complaints about our collection and use of your Personal Data. We will investigate and attempt to resolve any DPF Principles-related complaints within 45 days. EU, UK and Swiss individuals with inquiries or complaints regarding our handling of Personal Data received in reliance on the DPF Principles should first contact HubSpot here.
In compliance with the Data Privacy Framework, HubSpot commits to refer unresolved complaints concerning our handling of personal data received in reliance on the Data Privacy Framework to an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. The services of TRUSTe Dispute Resolution, are provided at no cost to you.
Under certain conditions, more fully described on the DPF website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted. The Federal Trade Commission has jurisdiction over HubSpot’s compliance with the DPF Principles.
In the context of an onward transfer, HubSpot is responsible for the processing of Personal Data it receives under the DPF Principles and subsequently transfers to a third party acting as an agent on our behalf. HubSpot will remain liable under the DPF Principles if our agent processes your Personal Data in a manner inconsistent with the DPF Principles, unless HubSpot is not responsible for the event giving rise to the damage.
Please note that under certain circumstances, we may be required to disclose your Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
5. How We Store and Secure Personal Data
5.1 Data Storage and Security
We use a variety of security technologies and procedures to help protect your Personal Data from unauthorized access, use or disclosure. We secure the Personal Data you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. All Personal Data is protected using appropriate physical, technical and organizational measures. For more on Security at HubSpot, please see https://trust.hubspot.com/.
5.2 Retention of Personal Data
How long we keep information we collect about you depends on the type of information and how we collect and store it. After a reasonable period of time, we will either delete or anonymize your information or, if this is not possible, then we will securely store your information and isolate it from any further use until deletion is possible.
We retain Personal Data that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements).
When we have no ongoing legitimate business need to process your Personal Data, we securely delete the information or anonymize it or, if this is not possible, securely store your Personal Data and isolate it from any further processing until deletion is possible. We will delete this information at an earlier date if you so request, as described in the "Privacy Rights and Choices" section.
If you have elected to receive marketing communications from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our content, products, or services, such as when you last opened an email from us or ceased using your HubSpot account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.
The data we process on behalf of customers connection with the Subscription Service is stored and secured according to the HubSpot Customer Terms of Service and Customer Data Processing Agreement.
6. Cookies and Similar Technologies
6.1 Cookies
When you visit our websites, sign up for a HubSpot account, attend a HubSpot virtual event, or request more information about HubSpot, we collect information automatically using tracking technologies, like cookies and tracking pixels. For more information, and to learn how to opt out, please refer to our Cookie Policies below.
HubSpot may use cookies or similar technologies (such as web beacons and JavaScript) to analyze trends, administer the website, monitor how visitors navigate around the websites, and to gather demographic information about our user base as a whole. To find out more about how we use cookies on our websites and how to manage your cookie preferences please see the HubSpot Cookie Policy.
6.2 Advertising
We partner with third party ad networks to display advertising on our website or to manage our advertising on other sites. Our ad network partner uses cookies and web beacons to collect information about your activities on this and other websites to provide you targeted advertising based upon your interests. If you wish to not have this information used for the purpose of serving you targeted ads, you may opt-out by using these services: https://optout.networkadvertising.org/ or https://optout.aboutads.info/ (or if located in the European Union, by clicking here: http://www.youronlinechoices.eu/). Please note this does not opt you out of being served advertising you will continue to receive generic ads.
7. Your Privacy Rights and Choices
7.1 Personal Data Requests
Depending on your location and applicable laws, you may have the following data protection rights:
- Access, Correction or Deletion. You can request access, correction, updates or deletion of your Personal Data.
- Objection or Restriction. You can object to our processing of your Personal Data, ask us to restrict processing of your Personal Data or request portability of your Personal Data.
- Withdraw Consent. If we have collected and processed your Personal Data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent. To exercise any of these rights:
- for HubSpot, including our websites and product or services, please use this form;
- for the Hustle, please contact us at privacy@thehustle.co.
If you’d like your information to be removed from our commercial dataset, or would like to opt out from the sharing of your Personal Data for our advertising and marketing activities, please fill out this form.
For all HubSpot brands (including the Hustle), you may also write to us by mail at HubSpot, Inc., Two Canal Park, Cambridge, MA 02141 USA, Attn: Privacy and Data Protection Officer.
Please note that to protect Personal Data, we may verify your identity by a method appropriate to the type of request you are making. Depending on where you reside, you may be entitled to empower an “authorized agent” to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination.
We will respond to your request to change, correct, or delete your data within a reasonable timeframe and notify you of the action we have taken. In some instances, your rights may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. Depending on your location, and applicable laws, you may have the right to complain to a data protection authority about our collection and use of your Personal Data. Contact details for data protection authorities in the EEA are available on the European Data Protection Board member page here.
If you are a customer, prospect, or otherwise interact with a HubSpot customer that uses our Subscription Service and would like to access, correct, amend or delete your data controlled by the customer, please contact the relevant customer directly. HubSpot acts as a processor for our customers in most cases and will work with our customers to fulfill these requests when applicable.
7.2 Anti-Spam Policy
Our Acceptable Use Policy applies to us and to our customers and, among other things, prohibits use of the Subscription Service to send unsolicited commercial email in violation of applicable laws, and requires the inclusion in every email sent using the Subscription Service of an "opt-out" mechanism and other required information. We require all of our customers to agree to adhere to the Acceptable Use Policy at all times, and any violations of the Acceptable Use Policy by a customer can result in immediate suspension or termination of the Subscription Service.
7.3 To Unsubscribe From Our Communications
You may unsubscribe from our marketing communications through the following methods:
- by clicking on the "unsubscribe" link located on the bottom of our e-mails;
- updating your communication preferences;
- for HubSpot, by contacting us on the HubSpot Privacy Request Form;
- for the Hustle by contacting us at privacy@thehustle.co; or
- for all HubSpot brands (including the Hustle) write to us by mail at HubSpot, Inc., Two Canal Park, Cambridge, MA 02141 USA, Attn: Privacy and Data Protection Officer.
Customers cannot opt out of receiving transactional emails related to their HubSpot Account or the Subscription Service.
d. To Unsubscribe From Our Customers' Communications
Our customers are solely responsible for their own marketing emails and other communications; we cannot unsubscribe you from their communications. Individuals who interact with a HubSpot customer can unsubscribe from our customers' marketing communications by clicking on the "unsubscribe" link located on the bottom of their emails, or by contacting them directly.
8. California Privacy Rights
8.1 Applicability
This section applies only to California consumers. For purposes of this section "Personal Information" has the meaning given in the California Consumer Privacy Act (“CCPA”). It describes how we collect, use, and share California consumers' Personal Information in our role as a business, and the rights applicable to such residents.
If you are unable to access this Privacy Policy due to a disability or any physical or mental impairment, please contact us and we will arrange to supply you with the information you need in an alternative format that you can access.
8.2 How We Collect, Use, and Disclose your Personal Information
We have collected the following statutory categories of Personal Information in the past twelve (12) months:
- Identifiers, such as name, e-mail address, mailing address, and phone number. We collect this information directly from you or from third party sources.
- Commercial information, such as subscription records. We collect this information directly from you.
- Internet or network information, such as browsing and search history. We collect this information directly from your device.
- Geolocation data, such as IP address. We collect this information from your device.
- Financial information, such as Payment Information or financial account numbers in the process of providing you with a subscription. We collect this information from you.
- Professional data, such as your job title and company.
- Other Personal Data, in instances when you interact with us online, by phone or mail in the context of receiving help through our help desks or other support channels; participation in customer surveys or contests; or in providing the Subscription Service.
- Inferences drawn from any of the above categories, alone or in combination.
The business and commercial purposes for which we collect this information are described in this Privacy Policy. The categories of third parties to whom we "disclose" this information for a business purpose are described in the “How We Share Personal Data” section of this Privacy Policy. The period of time for which we retain this information is described in the “How We Store and Secure Personal Data” section of this Privacy Policy.
In the preceding 12 months, we have “sold” or “shared” (as defined under the CCPA) certain information, including identifiers, to our advertising partners. We have also “sold” or “shared” certain information, including identifiers, approximate location data, and professional data to our customers.
8.3 Your California Rights
You have certain rights regarding the Personal Information we collect or maintain about you. Please note these rights are not absolute, and there may be cases when we decline your request as permitted by law. These rights include:
- The right of access means that you have the right to request that we disclose what Personal Data we have collected and maintained about you in the past 12 months.
- The right of deletion means that you have the right to request that we delete Personal Data collected or maintained by us, subject to certain exceptions.
- The right of correction means that you have the right to request that we correct any inaccurate Personal Data that we maintain about you.
- The right to request information concerning the categories of Personal Data (if any) that we disclose to third parties or affiliates for their direct marketing purposes.
- The right to limit the use of sensitive personal information means that you have the right to direct businesses to only use your sensitive personal information for limited purposes. We only collect sensitive personal information (such as your payment information), as defined by applicable laws for the purposes allowed by law or with your consent. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.
- The right to appeal means that you can appeal any decision by us to deny your privacy rights under applicable laws.
- The right to non-discrimination means that you will not receive any discriminatory treatment when you exercise one of your privacy rights.
We respond to all appeal requests as soon as we reasonably can, and no later than legally required.
8.4 How to Exercise your California Rights
You can exercise your rights yourself or you can alternatively designate an authorized agent to exercise these rights on your behalf. Please note that to protect your Personal Data, we will verify your identity by a method appropriate to the type of request you are making. Depending on your request, we will ask for information such as your name and your email address. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent's identity to protect your Personal Data. We may deny a request from an agent that does not submit proof that they have been authorized to act on your behalf.
We will respond within the time frame permitted by applicable law. Please note that we may charge a reasonable fee for multiple requests in the same 12-month period, as permitted by law.
Please use the contact details below, or see the "Your Privacy Rights and Choices" section above, if you would like to:
- Access this policy in an alternative format;
- Exercise any of your rights described above;
- Learn more about your rights or our privacy practices; or
- Designate an authorized agent to make a request on your behalf.
8.5 Right to Opt Out of "Sale" or "Sharing"
HubSpot collects data from publicly available sources or other third-party sources and discloses that information to our customers who purchase our enrichment products. This may be considered a “sale” or “sharing” under certain state privacy laws, such as the CCPA. Please see the "Information We Collect and Process in connection with our enrichment products” section for more information.
We may also "share" your Personal Data, as defined under the CCPA , with third party advertising partners to deliver personalized ads on HubSpot's behalf on other companies' sites or mobile apps. Please see the "Advertising Partners" section for more information.
If you’d like your information to be removed from our commercial dataset, or would like to opt out from the "sharing" of your Personal Data for our advertising and marketing activities, please fill out this form.
You can also control the personalized advertising you see by using these services: https://optout.networkadvertising.org/ or https://optout.aboutads.info/ (or if located in the European Union, by clicking here: http://www.youronlinechoices.eu/). Please note this does not opt you out of being served advertising and you will continue to receive generic ads.
We do not knowingly “sell” or “share” Personal Data of children under 16 years of age.
9. Other Important Privacy Information
9.1 Information About Children
The websites, product and services are not intended for or targeted at children under 16, and we do not knowingly or intentionally collect Personal Data about children under 16. If you believe that we have collected Personal Data about a child under 16, please contact us here, so that we may delete the information.
9.2 Third Party Dispute Resolution
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
10. Google Products and Integrations
10.1 Google reCAPTCHA
We have implemented Google reCAPTCHA Enterprise on certain products and services to prevent malicious software from engaging in abusive activities on our websites. You can learn more about data collected by Google and what this data is used for in Google's Privacy Policy. Additional information on Google services and products is available in Google's Terms of Service.
10.2 Gmail Integration
If you use the Gmail integration or choose to integrate any other Google Workspace application with HubSpot, you will be asked to give us access to information from your Gmail or Google account. You can learn more about how we access this data in the "Connect your personal email" knowledge base article or via in-app notice when you connect to Gmail. As a reminder, knowledge base articles are for your information only, they are not incorporated into these terms.
By using the Gmail integration with the Subscription Service you will grant the Subscription Service access to information associated with your account, including contacts, emails, calendar, distribution lists, subject lines, and URLs of tracked links from your email, if you use the email tracking functionality. In addition, the Subscription Service will be able to read, modify, create, and send emails from your connected Gmail account. The Subscription Service will scan the content of your emails to identify which emails you have elected to track in order to provide you with the notifications feature. The Subscription Service will store replies, outgoing mail, email headers, subject line, distribution lists, aliases, time sent, and email bodies. Your email may contain sensitive, private, or highly confidential information, such as names of your contacts, your private communications, or financial or medical information. You understand that the correspondences you track will be visible to other users on your Subscription team. Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.
If you connect your Gmail account via IMAP (or Generic Inbox Connection), the Subscription Service will have access only to email address, password, server information, email metadata, and message bodies. Additionally, connecting your Gmail account via IMAP does not require you to connect any other Google Workspace applications.
10.3 Additional Limits on Use of Your Google User Data
HubSpot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
10.4 Google Calendar Integration
The Subscription Service will have access to both your Google Calendar and any other calendar you access via Google in order to power our Meetings tool, and allow you to associate events with contacts in your HubSpot account. The Subscription Service will have the ability to: create or change your calendars, and update individual calendar events.
10.5 Google Drive Integration
As part of connecting your Google Drive, the Subscription Service will be able to: see your files, upload and download your files, and store file contents and titles. The Subscription Service uses these permissions to power the features of our Composer and Collect tools, allowing you to create drafts of blog posts in Drive and then upload directly for publishing.
10.6 Google Search Console
You can integrate your Google Search Console with our Content Management System (CMS) and our Marketing Hub product. As part of this integration, the Subscription Service will be able to view, manage and store properties which include the list of sites and domains you control in HubSpot and the Search Console data for your connected properties.
10.7 Chrome Extensions
- Sales Extension: You can install the HubSpot Sales Chrome Extension to track Gmail and Google Workspace emails through your Chrome browser. TheOnce installed, the Extension can read and change all your data on the websites you visit and display notifications. It logs all emails from Gmail and can be used in conjunction with the Inbox Integration.
- Collect Extension: The Collect Extension integrates with your Google Drive, allowing you to upload files and text directly from your Chrome Browser into your drive. These files will then be available for your use through the Google Drive integration.
- Social Extension: The HubSpot Social Chrome Extension allows sharing of pages, text, and images from around the web with the HubSpot Social Composer tool. You are able to draft or schedule posts, assign campaigns, and then see posts on the Social Calendar tool or in Social Reports once published. The Social Extension only accesses information about the current page, after its toolbar button is clicked, utilizing the permissions granted at this HubSpot knowledge base article.
10.8 YouTube Integration
If you are a HubSpot Customer and choose to use the YouTube integration with your HubSpot Subscription Services, you will be asked to give us access to information from your YouTube account and have the option to link your accounts.
By using the YouTube integration with the Subscription Service you grant the HubSpot Subscription Service access to information associated with your YouTube account. The Subscription Service will scan the content of your YouTube account to identify content you have elected to track in order to provide you with features in the Subscription Services. The Subscription Service will store information from your YouTube account. You understand that the information from your YouTube Account you track in the Subscription Services may be visible to other Users within your HubSpot Account.
Your use of HubSpot’s YouTube integration is subject to the YouTube Terms of Service available at https://www.youtube.com/t/terms and the Google Privacy Policy available at http://www.google.com/policies/privacy.
In addition to the typical data deletion functionality supported in the Subscription Services, Customers may have the option to revoke the YouTube integration from your HubSpot account, in the Google security settings page at https://security.google.com/settings/security/permissions. You can learn more about how we access information or remove access to your Google account by following the steps in the "Remove access to HubSpot in your Google account" knowledge base article.
11. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, or if you have a disability and need to access this notice in a different format:
for HubSpot contact us on our Privacy Request Form;
for the Hustle and Trends please contact us at privacy@thehustle.co; or
You may also contact us by postal mail for all HubSpot brands at:
Nicholas Knoop
HubSpot, Inc.
Two Canal Park
Cambridge, MA 02141 USA