CRM Integrations
|
Updated Aug 05, 2026
CRM Integration Security & Data Privacy
We take data security seriously. Here's how Mailthentic protects your CRM data.
OAuth 2.0 Authentication
- Mailthentic connects to your CRM using OAuth 2.0 — the industry-standard protocol.
- We never see or store your CRM login credentials.
- You authorise specific permissions (scopes) during the connection flow.
- You can revoke access at any time from either Mailthentic or your CRM's settings.
Data Handling
- Imported data: Only email addresses are extracted from your CRM for verification. We do not access or store names, phone numbers, deals, or other CRM fields.
- Token storage: OAuth tokens are encrypted at rest using Django's signing framework.
- Data retention: Verification results follow our standard retention policy. CRM connection metadata is kept until you disconnect.
Minimal Permissions
We request only the minimum scopes needed:
| Provider | Scopes |
|---|---|
| HubSpot | crm.lists.read, crm.objects.contacts.read, crm.objects.contacts.write |
| Salesforce | api, refresh_token |
| Mailchimp | read, write |
Disconnecting
- Go to CRM Connections and click Disconnect on any provider.
- Tokens are immediately invalidated on our side.
- For extra security, also revoke access in your CRM provider's app settings.
Contact us at support if you have specific security or compliance questions about CRM integrations.
Was this article helpful?
Let us know so we can improve our help center.