InboxAI wants to access your Google Account

JD
John Doe
john.doe@company.com
📧
InboxAI - Smart Email Assistant
AI-powered email summarization and quick replies

This will allow InboxAI to:

Read, compose, send, and permanently delete all your email from Gmail
Full access to read all emails, send on your behalf, and delete messages permanently
See, edit, create, and delete all of your Google Drive files
Complete control over all files in Drive including shared files
See, edit, download, and permanently delete your contacts
Full access to read, modify, and delete all contacts
See and download all your Google Calendar events
Read all calendar events including private and confidential ones
Maintain access to data you have given it access to
InboxAI can access your data even when you're not using the app (offline access)
See your personal info, including any personal info you've made publicly available
Access to profile information, name, email, and public data
By clicking Allow, you allow this app and Google to use your information in accordance with their respective terms of service and privacy policies. You can change this and other Account Permissions at any time.

🧪 DLP Test - Agent Least Privilege

Expected: SHOULD FIRE Purpose Claimed: "Email summarization and quick replies"

Reality: Far exceeds what's needed. Should only request read-only Gmail scope.