Safety and permissions
Safe for your LinkedIn account and your CRM
SyncToCRM reads only the LinkedIn page you have open, sends what you choose to your own HubSpot, and asks your browser for as little access as it can.
What it reads on LinkedIn, and when
- The page address, when you open a profile or company page, to check your HubSpot for that person or company and show the right button. On Sales Navigator account pages the company's name and website are read for this check, because the address only has a number.
- The profile or company page you're viewing (for a person: name, headline, current and previous role, company, location), when you click Add to HubSpot or open the side panel.
- The conversation you have open, when you click Log. If you switch on automatic logging in Settings, open conversations with people already in HubSpot are logged by themselves.
What it never does
- Visit profiles or pages for you, or open conversations.
- Send messages, connection requests, likes or anything else on your behalf.
- Scroll, crawl or load LinkedIn pages in the background.
- Read websites other than LinkedIn and HubSpot.
- Sell your data, share it with advertisers or keep a copy on our servers.
Tools that automate LinkedIn activity are the ones that get accounts restricted. SyncToCRM only does what you'd do by hand (reading the page in front of you and typing it into HubSpot), faster.
Every permission, and why
| Permission | Why SyncToCRM needs it |
|---|---|
| Access to linkedin.com | To show the Add to HubSpot button and the logo tab on LinkedIn, and to read the profile, company page or conversation you have open when you use SyncToCRM. |
| Access to HubSpot (api.hubapi.com) | To find, create and update contacts and companies in your HubSpot, and to add notes, follow-up tasks, list memberships and logged messages. |
| Side panel | To show SyncToCRM next to the page you're on, so you never switch tabs. |
| Storage | To keep your settings, your HubSpot connection and the list of messages already logged, in your own browser. |
| Tabs | To know which LinkedIn page is open in the current tab, so the panel shows the right person. |
| Scripting | To restart SyncToCRM in LinkedIn tabs that were open while the extension updated, so you don't have to refresh them. |
The keyboard shortcut (Alt+Shift+S) needs no extra permission. SyncToCRM runs no code downloaded from the internet: everything it runs ships inside the extension and is reviewed by the Chrome Web Store.
Where your data goes
Profile details go from your browser straight to your HubSpot account. During the beta there is no SyncToCRM server in between: your settings, your HubSpot connection and the record of logged messages stay in your browser's extension storage.
Before paid plans start, a "Connect HubSpot" sign-in will replace the key you paste in today. That needs a small server to hold your HubSpot sign-in and your subscription, never profile data. We'll update this page and the privacy policy before that happens.
Your CRM's data
- SyncToCRM never empties a HubSpot field. It only fills empty fields, or replaces a value when you choose to.
- It checks for an existing contact before every save, by LinkedIn address, LinkedIn member ID and email, so it doesn't create duplicates.
- It never links a contact to a company by guesswork: unsure matches are shown for you to pick.
Report a security problem
Email support@synctocrm.com with "Security" in the subject. We'll reply quickly and keep you updated until it's fixed.