Google Calendar integration permissions: Why???

SOLVE
Occasional Contributor

I just tried to connect HubSpot CRM to my Google Calendar account. Google warned me of the list of permissions HubSpot was requesting.

 

 

permissions.png

Looks like HubSpot wants access to everything I do in my company through G Suite. Why do you need access to my Drive, all my email, my Spreadsheets, etc just to sync with my calendar?

I want to use more integrations, but I'm not ready to give you a camera and lift up my skirt, so to speak.

1 Accepted solution

Accepted Solutions
Community Manager

Hi @Stobber,

 

This document outlines some of what you are looking for. 

 

If you use the 'Gmail and Outlook Integration' with the Sales Hub product, we will have access to certain information associated with your email account and will use some of this information to provide the Sales Hub product services. We may store and use your email data, such as the distribution lists (for example, the "to", "from", "cc", and "bcc" fields), the subject lines, and the URLs of tracked links from your emails in order to provide the Sales Hub product. If you use the "Send Later" feature in the Sales Hub product, we will store the bodies of the emails (along with the associated attachments) that you schedule to send in order to provide this feature to you. You must connect your inbox to the Sales Hub product in order to use the "Send Later" feature. If you use the 'Gmail and Outlook Integration', the Sales Hub product will scan the content of your outgoing emails to identify which emails you've elected to track in order to provide you with the notifications feature. If you opt to use our template building tools, the Sales Hub product will scan the content of your sent emails to identify possible templates for use by Users of your HubSpot account. By using the 'Gmail and Outlook Integration' with the Sales Hub product, you grant us the right to access and use your information and data as described in this section. If you do not agree to the terms in this section, you should not use the Sales Hub product.

 

The intent of having all those permissions is so that if you ever want to use features across HubSpot that use that data, you wouldn’t need to reconnect your gmail account. We understand that some users want more scoping around permissions, and that’s something that the team plans to tackle this year. From myself and the team who is in charge of this product: we hear you, and we get it-- there are some limitations around what we can currently do now, but we hope to change that in the future. If you are unwilling to connect your account, we totally understand, and we can let you know when we have more defined connections in the future. 

 

Thank you,
Jenny


Did my post help answer your query? Help the Community by marking it as a solution
13 Replies 13
Community Manager

Hi @Stobber,

 

These permissions are required due to technical limitations. Your privacy is a top priority for HubSpot; if you would like to read more about this, I wanted to share HubSpot's privacy policy.

 

Additionally, I wanted to mention that though we are asking for these permissions when connecting, we do not access any data until you uses a feature that requires that data.

 

Thank you,
Jenny


Did my post help answer your query? Help the Community by marking it as a solution
Reply
0 Upvotes
Occasional Contributor

Hi Jenny - 

 

Thank you. I opened the Privacy Policy. It referred to definitions in the ToS document, and it was complemented by the DSA document. The DSA, in PDF form, is 24 pages long. The ToS and PP are of comparable length. I hope you'll excuse me for not wading through ~70 pages of strict legal language in order to get my questions answered.

 

Maybe you can point me to the pertinent sections and clauses for explaining why you need rights to do these things when I connect my Google Calendar?

  • Read all my email
  • See all my private cloud files
  • Download my contacts
  • Manage my site's Google search optimization
  • Manage my domain list
Community Manager

Hi @Stobber,

 

This document outlines some of what you are looking for. 

 

If you use the 'Gmail and Outlook Integration' with the Sales Hub product, we will have access to certain information associated with your email account and will use some of this information to provide the Sales Hub product services. We may store and use your email data, such as the distribution lists (for example, the "to", "from", "cc", and "bcc" fields), the subject lines, and the URLs of tracked links from your emails in order to provide the Sales Hub product. If you use the "Send Later" feature in the Sales Hub product, we will store the bodies of the emails (along with the associated attachments) that you schedule to send in order to provide this feature to you. You must connect your inbox to the Sales Hub product in order to use the "Send Later" feature. If you use the 'Gmail and Outlook Integration', the Sales Hub product will scan the content of your outgoing emails to identify which emails you've elected to track in order to provide you with the notifications feature. If you opt to use our template building tools, the Sales Hub product will scan the content of your sent emails to identify possible templates for use by Users of your HubSpot account. By using the 'Gmail and Outlook Integration' with the Sales Hub product, you grant us the right to access and use your information and data as described in this section. If you do not agree to the terms in this section, you should not use the Sales Hub product.

 

The intent of having all those permissions is so that if you ever want to use features across HubSpot that use that data, you wouldn’t need to reconnect your gmail account. We understand that some users want more scoping around permissions, and that’s something that the team plans to tackle this year. From myself and the team who is in charge of this product: we hear you, and we get it-- there are some limitations around what we can currently do now, but we hope to change that in the future. If you are unwilling to connect your account, we totally understand, and we can let you know when we have more defined connections in the future. 

 

Thank you,
Jenny


Did my post help answer your query? Help the Community by marking it as a solution
Occasional Contributor

Thanks for the thorough follow-up. I really appreciate your effort. I would like more granularity with access permissions; I look forward to seeing those changes in the future.

Occasional Contributor

I completely agree with Stobber. Granting this much access to our Google Drive is out of the question, and we haven't found a good work-around yet. More granularity is needed ASAP!!

Highlighted
Occasional Contributor

Great to hear that this is being addressed.  Can you confirm that hubspot customers will be able to grant access to gmail and calendar but not provide access to Drive?  That is my main concern. 

 

Also can you please provide an update ETA as I am paying $$$ for hubspot and only using a fraction of the integrated functionality because of this security limitation.

 

Thanks in advance.

Community Manager

Hi @richardsteven,

 

Currently there is no timeline around changes to these permissions. This feedback has been passed along to the team, and if and when updates are available, they will be communicated with customers. 

 

Thank you,
Jenny


Did my post help answer your query? Help the Community by marking it as a solution
Reply
0 Upvotes
Occasional Contributor

Hi @jennysowyrda 

 

We're an IT-Operations and consultancy firm and our management has prohibited connection between HubSpot and our G-Suite because of the permissions that HubSpot needs.

 

The specific permissions that are definately a no-go are these:

 

"Read, compose, send and permanently delete all your email from Gmail"

"View and modify but not delete your email"

"See and download all your Google Drive files"

"See, edit, download and permanently delete all contacts"

"See, edit, create and delete your spreadsheets in Google Drive"

"See, edit, share and permanently delete all the calendars you can access using Google calendar"

 

The above list is basically an IT-Security professional's worst nightmare. Now, I appreciate that you are limited by Google's API and what that offers, but that doesn't really change our stance towards this :-)

 

Please proiritize this highly.

 

Cheers

Morten Olsson

Marketing Manager and Business Development Manager

Netic A/S

Denmark

New Contributor

In my opinion, it´s a critical thing to solve. I would love to share the calendar but I can´t accept full access to the Google Drive.

New Member

that's very unfortunate. The blanket permission is a little too wide for my taste. You're essentially asking us to give full permission to a 3rd party to be able to have access to a LOT of information that is sometimes very sensitive information. In case that you will suffer an 'accidental security breach' or some of your staff forgets a laptop somewhere - my sensitve files in google drive are copied to the web forever... that's a little more than what my team is comfortable at the moment. 

 

There must be a better way. This is just a little too much.

Reply
0 Upvotes
Occasional Contributor

I'd like to add my voice to the crowd saying these permissions are way too open for many people.

 

Manage the list of domains you control is needed for email access - really?

 

You really need to be able to cut down on the access rights required by the email/calendar integration.

 

Regards

Vittal

Visitor

I'd like to add my voice raising these privacy concerns.

 

Hubspot is a great business tool but is not worth giving away all our data and know-how. Please let us know when the permission range will be cut off. We'd like to move on a paid subscription but will surely not until that important issue is tackled.

 

Thank you,

Francesco

Reply
0 Upvotes
New Member

This is a huge issue for us also, the data permission is very wide and feels to much.

 

Hubspot, please could you update on whether there has now been any change to this?

 

Many thanks

Kitty

Reply
0 Upvotes