What Permissions Does Ghostwriter Request via Google OAuth?

Ghostwriter requests the minimum necessary Google OAuth scopes required to read active threads and insert draft replies.

Which OAuth scopes are required? - `https://www.googleapis.com/auth/gmail.compose`: Allows Ghostwriter to create and update draft messages in your Gmail account. - `https://www.googleapis.com/auth/gmail.readonly`: Allows Ghostwriter to read existing email threads when you explicitly trigger generation.

How is user email data handled? - **Zero Training on Email Body**: We never train proprietary or shared AI models on your private customer emails or inbox contents. - **Ephemeral Processing**: Email text is processed transiently during draft generation and not stored indefinitely in plain-text databases. - **Revocability**: You can instantly revoke Ghostwriter's access at any time through your Google Account Security Settings.

Verification Sources - Google OAuth configuration: `sonnev-ghostwriter/web/lib/auth/google.ts` - Unified Privacy Policy: `https://contact.sonnev.com/legal/privacy#ghostwriter`