Purpose of access
SenderGlow is an email deliverability service. A user may connect a Gmail or Google Workspace mailbox to run an explicitly configured mailbox warm-up plan. The connection is made through Google OAuth; SenderGlow never receives the user’s Google password.
A separate inbox placement feature may use metadata-only access for accounts that belong to SenderGlow’s authorized measurement network. Customer warm-up requires broader permissions because it must send controlled messages and manage only the messages created by the warm-up workflow.
Permissions and their exact use
| Google scope | Why SenderGlow requests it |
|---|---|
| Gmail metadata | Find SenderGlow-correlated test or warm-up messages and read message identifiers, labels, timestamps, and approved headers required for placement reporting. It is not used to read unrelated message bodies. |
| Gmail modify | For recognized SenderGlow warm-up messages only: update read state and, when a recognized message is in Spam, remove the Spam label and apply the appropriate Inbox state as part of the user-enabled warm-up interaction. |
| Gmail send | Send low-volume warm-up messages and controlled replies according to the daily limits, timing window, and reply rate configured by the user. |
Storage and protection
- OAuth refresh tokens are encrypted at rest and are never exposed in the browser interface.
- SenderGlow stores the connected email address, provider, granted scopes, token expiry information, configuration, and limited correlation records.
- Correlation records may include SenderGlow message identifiers, labels, timestamps, selected headers, and action results.
- SenderGlow does not persist unrelated Gmail message bodies for the warm-up or placement workflow.
- Data is transmitted using HTTPS and access is restricted to operational components.
What SenderGlow does not do
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- We do not sell Google user data.
- We do not transfer Google user data to advertising networks or data brokers.
- We do not use Google user data for personalized advertising.
- We do not use Gmail data to train generalized AI or machine-learning models.
- We do not access a mailbox after authorization has been revoked.
- We do not send unsolicited bulk email through a connected mailbox.
User consent and controls
Google displays the requested permissions before authorization. Warm-up remains under the user’s control and can be paused in SenderGlow. A connection can be removed from the Service, and Google access can be revoked at any time from Google Account connections.
For questions or deletion requests, contact [email protected]. The full terms are in our Privacy Policy.