Connecting Google Workspace
OAuth scopes we ask for, what we use them for, and how to disconnect later.
Google Workspace gives you per-user email and calendar integration. Each loan officer connects their own Google account; we send email from their address and read their calendar so Melanie can book meetings without double-booking.
What scopes we ask for
When you click Connect, Google asks you to grant:
- Calendar (read + write): so Melanie can read your availability and book confirmed meetings.
- Gmail (send only): so we can send drip and follow-up email from your address. We never read inboxes; the scope is
gmail.sendonly. - Basic profile (email): so we can label the connection in your settings.
You can review every scope before you click Allow.
How to connect
- Open the email integration step in the onboarding sidebar, or go to Settings -> Integrations.
- Choose Google Workspace.
- Click "Connect with Google". You leave LendAxiom briefly while Google asks you to log in and consent.
- Approve the scopes. Google redirects you back to LendAxiom and the connection is live.
What we do with the tokens
Google gives us a refresh token, which we store encrypted. We use it to mint short-lived access tokens for individual API calls. The refresh token is only readable by your workspace; admins can disconnect it from Settings -> Integrations at any time.
What happens when I disconnect
Disconnecting clears the refresh token. The next time the app needs Google Calendar or Gmail it will fail until you reconnect; nothing is auto-deleted on Google's side.