Gmail - Access & permissions
Elevale uses OAuth 2.0 to read metrics from Gmail. Elevale does not modify data in the external system. Tokens and keys are encrypted server-side after validation.
Who can connect
Workspace admins and users with permission to manage Workspace Settings integrations.
Connections are managed from Workspace Settings → Integrations.
Requires professional on your workspace plan.
What Elevale accesses
Read-only metrics exposed as KPI data points (see the Data points article).
Connection metadata (account IDs, property IDs, organisation tenants) needed for sync.
No write access to campaigns, repositories, accounting records, or CRM objects unless the provider API requires it for authentication only.
Google permissions
https://www.googleapis.com/auth/gmail.modify read mail and change labels, including archive and trash.
https://www.googleapis.com/auth/gmail.send send mail as the connected account.
https://www.googleapis.com/auth/gmail.settings.basic read the signature used on new mail.
https://www.googleapis.com/auth/userinfo.email identify the mailbox.
Elevale does not request Google Drive, Calendar, or Analytics as part of this connection.
Sync direction
Both ways for mail. Messages sync in. Replies, new mail, forwards, labels, and scheduled sends go out through Gmail.
Use Share on the account card to give a teammate read, draft, or send access without sharing the Google password.
Disconnect stops new syncs. Mail already in Gmail is unchanged.
Branding
Google's consent screen says Elevale. It does not show a white-label app name, and branding settings cannot change it.
Disconnect and data retention
Disconnect from Workspace Settings → Integrations to revoke stored credentials and stop scheduled syncs.
Previously synced KPI history remains until you delete or convert those KPIs.
Subprocessors and data handling: Subprocessors and integrations