Customer-directed access
Mailbox access occurs to execute an authenticated API request or a dashboard feature enabled by the account holder, such as retrieval, monitoring or an automatic-reply workflow.
MAILBOX ACCESS
Email access rules
Understand exactly when mailbox data is accessed, which features initiate access and what remains under customer control.
Provider authorization
OAuth providers show the scopes requested during consent. SMTP/IMAP access uses the connection supplied by the authorized mailbox owner. Removing provider consent or the mailbox connection stops future access.
No routine mailbox browsing
Mailbox content is not intended for routine employee browsing. Support should use diagnostics and account metadata first; customers must not send passwords, API keys or private messages in support requests.
Automation controls
Automatic retrieval or replies run only for enabled mailbox features. Human approval can be required before a prepared reply is sent.
Customer responsibility
The customer must have permission to connect the mailbox, choose lawful recipients and content, limit API-key access and comply with applicable privacy and communications rules.
Retention boundary
Operational logs and stored message records depend on the feature used. Account owners can request deletion through the published process, subject to legal, security and accounting retention requirements.