Is Clari Groove for G-Suite and Microsoft 365 safe?

Clari Groove reads the content of Gmail emails and Google Calendar events and sends them to its backend to log activity in Salesforce.

As a sales engagement tool, the extension scrapes composed and sent Gmail messages (subject, full body, sender, and all to/cc/bcc recipients) from the page and POSTs them to engine.groove.clari.com for activity logging, and similarly reads Google Calendar event details. It injects a 1x1 tracking pixel and rewrites links in outgoing email so the recipient's opens, clicks, and IP are reported back through Groove's tracking domains. It also reads the user's Salesforce session id from cookies and ships console/telemetry logs to a Splunk Cloud endpoint using a hardcoded token shipped in the service worker.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.