What Inboxer can access
Before you connect Gmail or Outlook, here's exactly what that grants - not a generic OAuth disclaimer, the real scopes Inboxer requests today.
Read email
Classify incoming messages and generate context for drafts, summaries, and meeting prep.
Create and edit drafts
Prepare AI-drafted replies attached to the relevant thread - saved as a draft, never sent automatically.
Modify labels / categories
Apply Inboxer's classification (To Respond, FYI, Action Required, etc.) directly in your existing mailbox.
Basic profile info
Identify your account (name, email address) - nothing beyond what's needed to know who's connected.
One honest nuance about “send”, provider by provider
Gmail: the scope Inboxer uses to read messages, manage labels, and create drafts (gmail.modify) also technically permits sending - Google doesn't offer a narrower “draft only” scope. Inboxer only invokes Gmail's send action after you explicitly approve that specific draft.
Microsoft Outlook: Microsoft separates the two: Mail.ReadWrite lets Inboxer read messages and create or edit drafts, but on its own does not permit sending. Inboxer additionally requests Mail.Send as a distinct scope, and only calls it after you explicitly approve the relevant draft.
Either way, the guarantee is an Inboxer application-level commitment, not an OAuth restriction: every AI draft sits in your mailbox as a draft until you click approve. See how approval-first works for the detail.
What Inboxer does not request
- No calendar access today - meeting prep works from calendar invite emails already in your mailbox, not a separate calendar connection.
- Inboxer can read attachments contained in authorised mailbox messages - that's ordinary mail content. It does not request access to Google Drive, OneDrive, SharePoint, contacts, or any other Google Workspace / Microsoft 365 app beyond Mail.
- No permission is requested that Inboxer doesn't currently use - see /security for the full data-handling picture.
You can revoke access at any time, from Inboxer or directly from your Google/Microsoft account settings.