Gmail Data, Disconnect, and Deletion

LeadStream users may connect personal Gmail accounts so they can view their own mailbox, send manual one-to-one emails and replies, update mailbox state, and link selected threads to leads.

A connected Gmail mailbox is private to the user who connected it. Other workspace users cannot browse that mailbox.

When a user manually links a Gmail thread to a lead, the linked thread history is visible read-only to users who can view that lead.

Lead-linked viewers cannot send, reply, archive, trash, star, mark read or unread, or otherwise mutate the connected Gmail mailbox unless they are the Gmail account owner.

Disconnecting Gmail revokes Google access when Google accepts the revoke request, deletes stored OAuth token material, stops Gmail sync and watch renewal, and deletes unlinked private mailbox cache from LeadStream.

Users can also review and revoke LeadStream access from their Google Account security settings.

Unlinked private mailbox cache is removed when the Gmail account is disconnected and is otherwise retained only for the configured rolling cache window.

Linked lead email snapshots remain CRM history after disconnect unless the Gmail account owner unlinks the thread from the lead or deletes the linked snapshot.

LeadStream writes redacted append-only audit records for Gmail connect, disconnect, manual send, mailbox action, and lead-link actions so the service can support security review and incident investigation.

These audit records do not store Gmail subjects, bodies, recipients, attachment filenames, raw headers, OAuth tokens, token ciphertext, raw provider payloads, or authorization codes.

Redacted audit records are retained as security and compliance evidence even when Gmail is disconnected, because they document service actions without retaining Gmail message content.

LeadStream uses Google Workspace API data only for visible Gmail product features: private mailbox viewing, manual sending and replies, user-controlled lead linking, linked lead read-only history, mailbox actions, sync status, and attachment access requested by the user.

LeadStream does not sell Google Workspace API data, does not use it for advertising or retargeting, does not use it to determine creditworthiness or lending decisions, and does not use it to train generalized AI or machine learning models.