Does HubSpot allow cold email?
Not for purchased or scraped lists. Its acceptable-use policy is built around opt-in contacts, which is a different job than cold outbound.
The short answer
- HubSpot's Customer Trust and Safety Guidelines say plainly: do not use the HubSpot Service to email purchased, rented, or borrowed lists. Its acceptable-use policy separately prohibits harvesting email addresses without consent. HubSpot is not a cold-email sender the way a dedicated outbound tool is.
- Teams that run genuine cold outbound typically send from a separate tool built for it, such as Instantly or Smartlead, and sync the replies back into HubSpot as the system of record.
- 'Allowed by a tool's policy' and 'legal to send' are two different questions. A platform's terms of service govern what you can do inside that platform. CAN-SPAM, GDPR and similar laws govern the send itself, whichever tool you use.
- Deliverability infrastructure, domain and mailbox warmup, and list hygiene matter more for cold outbound than which CRM you already own. A CRM that was not built for volume outbound will not fix a sending problem.
Why 'my CRM has an email tool' is not the same question
Most CRMs, HubSpot included, ship an email tool because sales reps send email. That tool is built for a specific shape of sending: known contacts, mostly opted in through a form, a demo request or an existing relationship. HubSpot makes that assumption explicit in its Customer Trust and Safety Guidelines, which state: do not use the HubSpot Service to email purchased, rented, or borrowed lists. Its acceptable-use policy adds that you may not harvest or otherwise collect email addresses without consent.
Cold outbound starts from the opposite assumption. The list is sourced, not opted in, and the first message is the first contact. That is a legitimate and common go-to-market motion. It is a different sending pattern from what a CRM's built-in email tool expects, and it is the pattern HubSpot's policy specifically restricts.
The practical result is that teams doing real cold outbound almost always run it from a tool built for that pattern, then bring the replies into their CRM once a conversation starts. The CRM stays the system of record for the relationship. The outbound tool handles the sending mechanics HubSpot's own tools were not built to allow.
What HubSpot allows, what a dedicated tool adds
| HubSpot's own email tools | A dedicated outbound tool (Instantly, Smartlead) | SalesCrew | |
|---|---|---|---|
| List sourcing | Opted-in contacts only; purchased, rented or borrowed lists are prohibited by HubSpot's Customer Trust and Safety Guidelines | Built for sourced or purchased lists | Allowed; suppression enforced when an audience is frozen and re-checked at send |
| Sender infrastructure | Standard mailbox sending | Domain and mailbox warmup, rotation, deliverability tooling | Sender pool with per-mailbox and per-domain daily caps; a dedicated send provider on higher tiers |
| Where replies live | In the CRM, by design | In the sending tool; usually synced elsewhere | In the same database as the pipeline, so a reply becomes a deal without a second tool |
| Compliance obligations | The sender's, under HubSpot's terms and the law | The sender's, under the law | The sender's; suppression and opt-out are enforced by the product, but CAN-SPAM, GDPR and similar laws are the customer's responsibility |
HubSpot policy wording checked on policy.hubspot.com/trust-safety and legal.hubspot.com/acceptable-use, September 2026.
What to check before you send
If your list was built from form fills, demo requests or an existing relationship, your CRM's built-in email tool is probably the right place to send from. HubSpot's policy is not a blocker. If your list was purchased, scraped or otherwise sourced without an opt-in step, sending it through HubSpot's tools puts you outside its acceptable-use policy. That is separate from whatever your legal obligations are for that list in the first place.
Either way, the sending policy and the law are two separate checks. A platform's terms of service can be stricter or looser than what CAN-SPAM, GDPR, or a similar law requires. Passing one does not mean you have passed the other.
Disclosure: SalesCrew is our product. It allows cold outbound as a matter of product policy. The data bank, suppression list, cadences and sender pool live beside the pipeline, and suppression is enforced both when an audience is frozen and again at send. "Allowed" describes what the product lets you configure, not a legal judgment about your list or your jurisdiction. Those obligations stay with the sender.
Allowed by a tool is not the same as compliant
Questions
- Can I still use HubSpot for cold outbound if I am careful?
- You can send from HubSpot's email tools, but its acceptable-use policy prohibits sending to purchased, rented or scraped lists. If your list was not opted in, sending it through HubSpot's own tools is against the terms you agreed to. That is separate from whether it is legal in your jurisdiction.
- What is the difference between HubSpot's marketing email and sales email tools?
- Both sit under the same acceptable-use policy on list sourcing. Sales sequences are built for one-to-one outreach to known contacts, not for lists sourced without opt-in. The same restriction applies to either tool.
- Do Instantly and Smartlead have the same restriction?
- Cold-email-focused tools are built around outbound to unsolicited lists, which is a different starting assumption from a marketing platform. Every sender is still bound by CAN-SPAM, GDPR and similar laws, whichever tool sends the message.