G Suite Permissions for Relationships

To support Terminus Relationships' analysis of your company's email activity and to build a relationship graph, we ask for the following permissions when we connect your GSuite account to our Terminus Relationships processing pipeline:

• https://www.googleapis.com/auth/userinfo.email 
• https://www.googleapis.com/auth/userinfo.profile
• https://www.googleapis.com/auth/gmail.readonly 
• https://www.googleapis.com/auth/gmail.send 
• https://www.googleapis.com/auth/calendar 
• https://www.googleapis.com/auth/admin.directory.user.readonly

The first two on the list represent basic oAuth permissions for any G Suite application. The following four are addressed below.

Permission: https://www.googleapis.com/auth/gmail.readonly

In order to analyze your company's email activity, we first need permission to read your employee emails.

This permission does give us access to read all fields of your email, however, we do not download attachments and we do not store email subject lines or email bodies. We only store the senders, recipients, and timestamps of emails.

We have access to email subject lines and email bodies in-memory only to filter transactional emails. This information is never stored on the Terminus servers.

Permission: https://www.googleapis.com/auth/gmail.send

This permission gives Terminus the ability to send email on your behalf. We do not currently use this feature, but anticipate doing so in the future.

We will never send an email on your behalf without getting the user's explicit permission to do so.

Permission: https://www.googleapis.com/auth/calendar

Terminus Relationships also analyzes calendar events to help gather relationship and location intelligence. Similar to emails, while we do have access to all calendar fields, we only store the sender, recipient, timestamp, and location of a calendar event.

Permission: https://www.googleapis.com/auth/admin.directory.user.readonly

Finally, we ask for permission to read your user directory so that we can find the mailboxes and email addresses we need to process.