Privacy policy

1. Who we are

SyncToCRM is a product of Qkumo Ltd (company number 12948561, registered in England and Wales), registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom ("Qkumo", "we", "us").

This policy covers the SyncToCRM browser extension, the website synctocrm.com, beta sign-ups and support. For the personal data we collect ourselves (sections 4 to 6), Qkumo is the data controller under the UK GDPR and, where it applies, the EU GDPR. Contact us about privacy at support@synctocrm.com.

2. What the extension handles

Details from LinkedIn

• Page address. When you open a LinkedIn profile or company page, the extension uses its address to check whether that person or company is already in your HubSpot. The check is a search sent to your HubSpot account. On Sales Navigator account pages, whose address only carries a number, the company's name and website are read for the same check.
• Profile details, when you click Add to HubSpot or open the side panel: name, headline, current and previous job title and company, the dates of those roles, location, profile address and LinkedIn's member ID for that profile. On Sales Navigator, also the address of the person's Sales Navigator page.
• Company page details, when you click Add to HubSpot on a company page or open the side panel there: name, website, industry, size and headquarters.
• Messages, when you click Log on an open conversation or, if you switch on automatic logging, from conversations open on your screen with people already in your HubSpot. Only messages shown on screen are read.
• Email address and phone number, only if you type them in.

You choose which details are saved. The extension reads nothing from LinkedIn pages you don't have open and never loads LinkedIn pages by itself.

Details from HubSpot

To show who's already in your CRM, the extension reads from your HubSpot account: matching contacts and companies, their owner, lifecycle stage, lead status, last activity, open deals and lists, and your HubSpot users' names (to show owners). They're shown in the side panel and not stored anywhere else.

Stored in your browser

• Your HubSpot connection (during the beta, the HubSpot key you paste into Settings).
• Your settings: field choices, defaults and feature switches.
• IDs of LinkedIn messages already logged, so they aren't saved twice.
• The list of job changes you've seen (name, profile address, old and new role), until you update or dismiss them.
• The details of the profile open in each tab, for the side panel, until you close that tab or the browser.
• Where you moved the logo tab on the edge of the page.

These stay in your browser's extension storage on your device. Removing the extension deletes them. The extension contains no analytics or tracking.

3. Where extension data goes, and who is responsible for it

Profile details, company details and logged messages go from your browser directly to HubSpot (HubSpot, Inc.), into the account you connected, where your agreement with HubSpot applies. We have no server that receives, stores or sees this data, so Qkumo is neither controller nor processor of the contacts you save.

You decide whose details you save to your CRM and why. That makes you, or the company you work for, the controller of those contacts under data protection law: responsible, for example, for having a lawful reason to keep them, for telling people where required and for answering their requests.

Before paid plans start, a "Connect HubSpot" sign-in will replace the pasted key. That needs a small server to hold your HubSpot sign-in tokens and your subscription status, never profile data. We'll update this policy before that happens.

4. Personal data we collect, and why

We only email beta users about SyncToCRM, and you can ask us to stop at any time. We don't make decisions about anyone based solely on automated processing, including profiling.

5. Cookies and analytics on synctocrm.com

synctocrm.com uses Google Analytics, loaded through Google Tag Manager, to count visits and see which pages people read and where they came from. It records the pages you view, how far you scroll, the site that sent you, your browser and device, and your approximate location, which Google works out from your IP address without storing the address. It also counts beta sign-ups, never with your name or email address. To recognise return visits, Google Analytics sets two first-party cookies (_ga and _ga_…) that last up to two years.

Advertising features are off: no advertising cookies, no Google signals and nothing used to target ads. Apart from your analytics choice (kept in your browser's storage, not a cookie), the website sets no other cookies.

Your choice is remembered in this browser. Analytics also stays off if your browser sends a Global Privacy Control signal, and you can block it on every site with Google's opt-out add-on.

6. Who we share personal data with

We don't sell personal data or share it with advertisers or data brokers. These service providers process it for us, only to provide their service and under contracts that protect it:

We may also disclose data where the law requires it, to protect our rights or users' safety, or to a buyer if Qkumo's business is sold, in which case this policy continues to apply.

7. International transfers

Some providers process data outside the UK and the European Economic Area, mainly in the United States. Where they do, the transfer is covered by UK adequacy regulations (such as the UK-US data bridge), the European Commission's standard contractual clauses with the UK addendum, or the UK international data transfer agreement.

8. Security

The website is served only over HTTPS. The extension talks to HubSpot over encrypted connections and keeps your HubSpot connection in your browser's extension storage, which other websites can't read. Access to our own accounts (HubSpot, email, hosting) is limited to the people who need it. No system is perfectly secure; if a breach affects your data, we'll tell you and the regulator as the law requires.

9. Your rights

Under the UK GDPR and the EU GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct it, or delete it;
• restrict how we use it, or object to our use of it, including for emails (which we'll always stop);
• send it to you or another company in a common format.

Email support@synctocrm.com. We'll answer within one month. It's free unless a request is clearly unfounded or excessive. If you're unhappy with our answer, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live.

If you're a LinkedIn member whose details someone saved to their CRM with SyncToCRM, that data is in their CRM, not with us. Please contact them; we'll help where we can.

10. Chrome Web Store User Data Policy

SyncToCRM's use of information received through the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the extension's single purpose (adding LinkedIn profiles to your CRM and showing what's already there). It isn't transferred except as described here, isn't used for advertising, isn't sold, isn't read by people except with your permission or for security or legal reasons, and isn't used to determine creditworthiness or for lending.

11. Children

SyncToCRM is a business tool for people aged 18 or over. We don't knowingly collect data from children.

12. Changes to this policy

We'll update this page when what we collect or how we use it changes, and change the date at the top. For significant changes we'll tell users by email or in the extension at least 30 days before they take effect.

13. Contact

Qkumo Ltd, 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Email: support@synctocrm.com.