Google OAuth explained

Why EmailMassa asks for these permissions.

Each permission supports a visible feature. EmailMassa does not request inbox-reading access and never receives your Google password.

Send email

gmail.send lets EmailMassa submit messages through the Gmail API after you explicitly start a campaign. It does not grant inbox-reading access.

Create labels

gmail.labels lets the extension create its own organizational labels in Gmail. EmailMassa does not request the broader permission required to read or modify your existing messages.

Use a selected Google Sheet

drive.file lets EmailMassa access only files that you select or create for the app. The hosted Google Picker is used to choose a Sheet without granting access to all Drive files.

Identify the connected account

userinfo.email and userinfo.profile provide the email address, display name, and profile image used in the extension. The email address also links a confirmed Premium purchase to the correct account.

Revoke access

You can revoke EmailMassa at any time from your Google Account security settings. After revocation, sending and Sheet import will stop until you reconnect.

EmailMassa uses Google user data only to provide the user-facing features described here and follows Google's Limited Use requirements.