Skip to main content
Connecting Gmail is the most important step in Slashy setup. Here is exactly what you are granting and how it works.
Google OAuth consent screen showing Slashy permissions

​
How It Works (OAuth 2.0)

Slashy uses OAuth 2.0 — the same standard used by Slack, Notion, Zoom, and Superhuman.
  • Slashy never sees your Google password. You sign in on Google’s login page. Google gives Slashy a scoped token.
  • Revoke anytime. Delete the token from your Google account settings to instantly cut off access.
  • Tokens auto-expire. Even if intercepted, tokens stop working within an hour.

​
Permissions Requested

PermissionWhat It AllowsWhy Slashy Needs It
Read your emailView messages and metadataDisplay inbox, power AI features, sort into labels
Send email on your behalfSend new emails and repliesSend emails you compose or accept from AI drafts
Manage your emailArchive, label, star, trashPerform inbox actions you trigger in Slashy
View and edit calendarRead/write Google Calendar eventsShow calendar, create events, check availability for AI scheduling
Slashy does not request access to Google Drive, Contacts, Photos, or any other Google service.

​
What Slashy Cannot Do

  • Access your Google password
  • Access Drive, Docs, Sheets, or non-email/calendar services
  • Send email without your action (every send is composed, accepted, or triggered by you)
  • Permanently delete email (requires a separate permission Slashy does not request)
  • Share your data with third parties or use it for advertising

​
Google Workspace vs. Personal Gmail

FeaturePersonal GmailGoogle Workspace
OAuth connectionWorks immediatelyMay require IT admin approval
Admin approvalN/AAllowlist Slashy in Security > API Controls > App Access Control
Multiple accountsUnlimitedMix personal and Workspace accounts freely
If you see “Access blocked,” your Workspace admin needs to allowlist Slashy. Send them our Security FAQ and DPA.

​
CASA Tier 2 Compliance

Slashy has completed Google’s CASA Tier 2 security audit — the same tier required of Superhuman, Streak, and other Gmail clients. An independent assessor reviewed code, infrastructure, and data handling. Verified apps show a badge on the OAuth consent screen instead of “Google hasn’t verified this app.”
CASA Tier 2 verified app badge on OAuth screen

​
Verify Your Sync

1

Check inbox

Open Slashy and look for recent messages. They should appear within minutes of connecting.
2

Check status

Go to Settings > Account (Cmd+,). Your account shows a green status indicator when sync is healthy.
3

Test outbound

Send a test email from Slashy to confirm sending works.
4

Check calendar

Press 2 for Calendar view. Events should appear from all connected calendars.
Large inboxes (50,000+ emails) can take up to an hour for initial sync. New emails arrive in real-time during this process.
Settings showing connected account with green status

​
Revoke Access

From Slashy: Settings > Account > Connected Accounts > remove the account. From Google: Go to myaccount.google.com/permissions, find Slashy, click Remove Access. Tokens are invalidated immediately.

​
Common Questions

Slashy caches email metadata and content for display and AI processing. Content is processed by Anthropic’s Claude models. All cached data is encrypted at rest and in transit. Revoking access deletes cached data.
Yes — background access powers automations and real-time sync. This is the same model every email client with push notifications uses. Revoking access stops all background processing immediately.
No. Your data powers your personal AI features only. Anthropic’s API policy explicitly prohibits using API inputs for model training.
OAuth tokens are stored in encrypted server-side storage. Tokens can be mass-revoked by Google, and you can individually revoke at myaccount.google.com/permissions. Slashy never has your password, so a breach cannot compromise your Google credentials.
The production version of Slashy is verified and CASA Tier 2 compliant. If you see this on the main app, contact support@slashy.com.

Your First Week

Day-by-day guide to getting up and running.

Security & Privacy

Certifications, encryption, and data handling.

Calendar Setup

Sync your calendar after connecting Gmail.

Multiple Accounts

Add and manage multiple Gmail accounts.