SECURITY & PERMISSIONS

Your inbox is personal.
Our boundaries are explicit.

Google permissions can sound broad. Here’s exactly what ghostwork does with each one, and what it never does.

Gmail · Read onboarding email

✓ Does: Finds offers you label “Offer Sent” and reads replies in the onboarding threads ghostwork started.

× Never: Never opens anything else in your inbox. Other messages are skipped without being read.

✓ Does: Sends the emails you can preview on the Templates page, from your address, to the people you named.

× Never: Never sends anything you can’t see in the email log, and nothing at all while sending is paused.

✓ Does: Creates the single “Offer Sent” label during setup.

× Never: Never labels, moves or deletes your email.

✓ Does: Keeps each candidate’s documents in a folder in your Drive and shares payroll files with Finance as view-only links.

× Never: Can’t see any other file in your Drive.

✓ Email text and documents are never stored in our database: only links, IDs and status.
✓ Google sign-in tokens are encrypted.
✓ AI only reads and suggests. Code acts, and only when the AI is sure and the sender is right. Anything else comes to you.
✓ Every email, reading and decision is written to an audit log that can’t be edited.
✓ Safety mode is on until you switch it off: emails are recorded, not sent.

Correct any value the AI read, hold a queued email, pause one candidate or every send, and take over any task with one click.

Sends stop. Reconnect, check what’s waiting, and nothing is lost. You can remove ghostwork’s access at any time from your Google Account.

Start by seeing exactly what you approve.