🛑 Major Privacy Breach in Two-Way Email Sync with Duplicate Contacts
J
Julien Fiset
The current behavior of the two-way email sync feature causes emails to be routed incorrectly when duplicate contacts are involved. This creates a critical breach of data privacy and directly contradicts the "Only Assigned Data" permission.
🔑 Key Issue:
- When two users have duplicate contacts for the same person, emails are not routed to the correct contact’s conversation. Instead, emails appear in the conversation linked to the wrong duplicate, exposing confidential information to unintended users.
- The affected user also cannot see the email in their CRM, causing operational inefficiencies.
🌎 Real-World Example:
In a real estate team:
- Realtor 1 has a contact for Notary A, and Realtor 2 has a duplicate for the same notary for their own transaction.
- If Notary A sends an email to Realtor 2, it appears in Realtor 1’s conversation, violating confidentiality and rendering the email invisible to Realtor 2.
âť“ Why It Matters:
- This flaw undermines the "Only Assigned Data" permission, which is essential for maintaining data security.
- It poses a significant risk to industries like real estate and legal services where data privacy is non-negotiable.
- It’s only a matter of time before this issue causes widespread user dissatisfaction and damages trust in Go High Level.
🛠️ Proposed Fix:
Each contact already has a unique ID visible via the URL. Email routing should respect this unique ID to ensure emails are linked to the correct contact and assigned user.
🚨 Urgency:
This is not a feature request; it is a critical bug affecting data confidentiality. Addressing this issue immediately will protect the integrity of the platform and avoid potential reputational harm.
Log In
O
Oliver Cordingley
We noticed this a few weeks ago by accident with a client's inbox showing in not only their subaccount, but the demo account we assigned to them to play with. This urgently needs fixing Sales & Marketing, as this should not be an intended feature
D
Devon Smart
Make a support ticket and attempt to elevate it to a dev if you haven't already.
J
Julien Fiset
Devon Smart We’ve already submitted a support ticket, and their response clarified that this isn’t considered a bug, as the feature operates as intended across all users and agencies. However, they acknowledged our specific use case and recommended creating unique sub-accounts for each user to avoid contact duplication and ensure proper email delivery.
They also mentioned that managing multiple sub-accounts is not an ideal long-term solution and have treated this as an enhancement request. The product team will evaluate ways to improve the feature in future releases.
That’s why we need more votes!!