Hubspot
- Your data trains their AI unless you switch it off in settings.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
HubSpot trains AI on your data unless you toggle it off, shares professional data, and auto-renews with no refunds.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, usage, device IDs, logs, and professional data from public sources and partners.
Read the exact line
Privacy policy
“We may collect Personal Data about you from other sources, such as third party providers and publicly available sources (like social media platforms).”
Training
They run the product, market to you, and train HubSpot AI unless you turn that off in settings.
Read the exact line
Privacy policy
“When you use our products and services we may process personal data to develop, support, and improve HubSpot AI features and to train our AI models and similar products and services that rely on machine learning.”
Sharing
Service providers, partners, ad networks, and customers who buy enrichment data can see it.
Read the exact line
Privacy policy
“We may share Personal Data about individuals in our commercial dataset with our customers that use our enrichment products.”
Kept
They keep it while they have a business need, then delete or it.
Read the exact line
Privacy policy
“We retain Personal Data that you provide to us where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements).”
Controls
You can , opt out of ads sharing, leave the commercial dataset, and turn off AI training.
Read the exact line
Privacy policy
“If you’d like your information to be removed from our commercial dataset, or would like to opt out from the sharing of your Personal Data for our advertising and marketing activities, please fill out the Your Privacy Preferences form.”
Fine print
Subscriptions auto-renew, payments are mostly non-refundable, you them, and courts are in Massachusetts.
Read the exact line
Terms of service
“All payment obligations are non-cancelable and all amounts paid are non-refundable, except as specifically provided for in this Agreement.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off AI model training
HubSpot account settings (see “Opt out of HubSpot's machine learning data use”)
Remove yourself from the commercial dataset and ad sharing
Your Privacy Preferences form linked from the Privacy Policy
Request access or deletion of personal data
HubSpot Privacy Request Form or privacy@hubspot.com
Turn off auto-renew before the term ends
Account & Billing section of your HubSpot account
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Your product data can be used to train HubSpot’s AI unless you change a setting.
Read the exact line
Privacy policy
“When you use our products and services we may process personal data to develop, support, and improve HubSpot AI features and to train our AI models and similar products and services that rely on machine learning.”
For example, tickets and emails in your HubSpot account could help train their models until you opt out in settings.
They treat some sharing with ad partners and enrichment customers as a sale under California law.
Read the exact line
Privacy policy
“In the preceding 12 months, we have “sold” or “shared” (as defined under the ) certain information, including identifiers, to our advertising partners.”
For example, your work email could be used so HubSpot ads follow you on other sites.
They put professional contact details into a dataset other companies can use for sales.
Read the exact line
Privacy policy
“We may share Personal Data about individuals in our commercial dataset with our customers that use our enrichment products.”
For example, your job title and work email from LinkedIn-style sources could be sold to a HubSpot customer.
If someone sues HubSpot because of how you used the product, you may have to pay their legal costs.
Read the exact line
Terms of service
“You will , defend and hold us and our Affiliates harmless, at your expense, against any third-party claim, suit, action, or proceeding”
For example, if a contact sues over an email you sent through HubSpot, you could have to cover HubSpot’s defense.
You generally cannot get money back if you cancel mid-term.
Read the exact line
Terms of service
“All payment obligations are non-cancelable and all amounts paid are non-refundable, except as specifically provided for in this Agreement.”
For example, if you pay yearly and stop using HubSpot after two months, they keep the rest.
Third-party ad companies track you across sites to show HubSpot ads.
Read the exact line
Privacy policy
“Our ad network partner uses cookies and web beacons to collect information about your activities on this and other websites to provide you targeted advertising based upon your interests.”
For example, visiting a HubSpot blog can later show HubSpot ads on another news site.
You can turn off AI training in the product settings.
Read the exact line
Terms of service
“You may opt out of having your Customer Data used for this purpose by updating your settings in your HubSpot account.”
For example, you can switch off machine-learning data use so new tickets are not used to train models.
Your CRM content stays yours; they only get permission to run the service.
Read the exact line
Terms of service
“You own and retain all rights to the Customer Materials and Customer Data.”
For example, your contact list and emails remain your company’s property.
The paid product is for adults; they also say they do not target kids under 16.
Read the exact line
Terms of service
“You must be 18 years of age or older to use the Subscription Service.”
For example, a 17-year-old should not create a HubSpot subscription account.
Unless you turn auto-renew off in billing, they charge you again.
Read the exact line
Terms of service
“your subscription will automatically renew for the shorter of the same duration as your prior term or one year.”
For example, a one-year plan rolls into another year if you do not disable auto-renew.
Big privacy changes should come with a direct notice, not only a silent website update.
Read the exact line
Privacy policy
“We will post any Privacy Policy changes on this page and, if the changes are material, notify you directly (for example, by sending you an email notification).”
For example, if they start a new data use, they say they will email you.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- CCPA
- California's privacy law, which gives residents the right to see, delete and stop the sale of their data. For example, a Californian can ask the app to stop selling their data and it must comply.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- tracking pixels
- Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- auto-renewal
- Your subscription keeps charging you at the end of each period until you cancel it. For example, a free trial turns into a paid monthly plan unless you cancel before it ends.
How we got here · grade C · score 43/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect account and payment info, usage, device IDs, logs, IP, partner data, and professional details from public sources for a commercial dataset.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Customer data may be used to train HubSpot AI by default; you can turn that off in HubSpot account settings.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Third-party ad networks collect site activity and they may share emails with advertising partners for personalized ads, with opt-outs.
Do they sell or share your data, and can you opt out?
They share with partners and say they have sold or shared identifiers with ad partners and enrichment customers; you can opt out via a form.
What rights do they take over what you type and what the AI makes?
You own Customer Data and Materials; you only grant permission needed to provide the service.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data while they have a business need; you request access or deletion through a privacy form, not a stated in-app 30-day wipe.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They keep a commercial dataset of professionals used for enrichment; you can ask to be removed by form, but no in-product memory editor is described.
Do they commit to basic security, and have they leaked data?
They describe physical, technical, and organizational security and point to a Trust Center; no breach history is stated.
Is there a real age gate, and are teens protected?
You must be 18 to use the Subscription Service, and they say they do not knowingly collect data on children under 16, with no age-proofing described.
Will they tell you when the rules change, and is the policy specific?
The policy is dated April 14, 2026; they post changes and say they will email you for material privacy changes.
Can they close your account without warning, and can you get your data out first?
Paid accounts can be ended for cause with 30 days’ notice; free services can be stopped anytime without notice. Export is pointed to product terms, not fully described here.
If something goes wrong, who pays?
The service is as-is, liability is capped at about 12 months of fees, and you must indemnify HubSpot for many third-party claims.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew; they give 30 days’ notice of renewal price increases; prepaid fees are generally non-refundable.
The privacy policy is 8,507 words at a college level (Flesch reading ease 40.4); the terms are 9,869 words at a college graduate level.
