MiniCRM Lead Capture Chrome extension security report

Capture leads from any webpage in seconds. MiniCRM Lead Capture uses AI to read the current page, extract contact details, and pre-fill your MiniCRM webform — so you can submit a lead without switching tabs or copying and pasting. **How it works** 1. Open the extension settings and paste your MiniCRM Direct Form URL. The extension fetches your form's field schema and saves it locally on your device. 2. Browse to a contact page — a LinkedIn profile, company website, directory listing, or anywhere a prospect's details appear. 3. Click the extension icon. AI reads the page and pre-fills your form fields automatically. 4. Review and edit the pre-filled values, then click "Capture Lead." 5. The lead is submitted directly to MiniCRM via your webform. Done. **Features** - AI-powered extraction — Google Gemini (via a secure backend) matches page content to your specific form fields, not just generic contact fields - Dynamic form — all fields are rendered live from your MiniCRM schema, including dropdowns, textareas, and required-field indicators - Draft autosave — edits are saved locally every few seconds so nothing is lost if you close and reopen the popup - Extraction cache — results are cached per page for one hour so reopening the popup on the same page is instant - Restricted-page fallback — on Chrome system pages, PDFs, or pages where content cannot be read, the extension shows an empty form for manual entry instead of showing an error **Permissions used and why** activeTab — needed to identify the tab you are currently viewing so the extension knows which page to process. scripting — needed to inject a one-time content script into the active tab to read its text (title, headings, links, and body content). The script runs only when you click the extension icon. No persistent background scripts run on pages you visit. storage — needed to save your form configuration, field schema, per-page extraction cache, and draft edits locally on your device. Nothing is written to sync storage. Network access to minicrm-lead-capture.minicrm-lead-capture.workers.dev — the extension sends page text to this Cloudflare Worker for AI processing and relays the final submission to MiniCRM. No other external domains are contacted by the extension. **Privacy** - Page text is sent to the Cloudflare Worker only at the moment you click the extension icon. It is processed in-flight and never persisted on the server. - Extracted values and draft edits are stored in chrome.storage.local on your device only. They are not synced, uploaded, or shared with any third party. - Form submissions go directly to your MiniCRM webform endpoint over HTTPS. No submission data passes through our backend. - No analytics, telemetry, or usage tracking of any kind. **Setup** 1. Click the extension icon, then open Settings (or right-click the icon and choose Options). 2. Paste your MiniCRM Direct Form URL. You can find it in MiniCRM under Forms → your form → "Embedding a form and direct linking." 3. Click "Connect Form." The extension fetches your schema and shows a field preview. 4. Navigate to any contact page and click the extension icon to start capturing leads.