Google Workspace Integration
One OAuth grant powers every Smoo AI feature that touches Google — from Gmail-driven CRM ingest to Calendar booking, Drive search, Business Profile review management, and Ads campaign control.
Permission tiers
Pick the access level you're comfortable with. You can change it at any time.
Includes all read-scoped APIs above. Recommended for evaluation or read-only analytics workflows.
Recommended for production usage where you want AI agents to take action on your behalf with you in the loop.
What every scope does
We only request the scopes powering features you can see in the app. We do not request anything we don't use.
Demo: Agent: "Reply to Alice with our standard intro." Smoo AI drafts → you click Send → message goes through your Gmail.
Scopes: gmail.readonly gmail.modify gmail.send
Demo: Share /book/your-team-slug with a customer → they pick a slot → calendar event created + confirmation email sent.
Scopes: calendar.readonly calendar calendar.events
Demo: Settings → Integrations → Google → "Sync contacts" → CRM populates with source=google-contacts.
Scopes: contacts.readonly contacts
Demo: Agent: "Find my Q4 sales spreadsheet." → returns matching Drive file with link.
Scopes: drive.readonly drive.file
Demo: Connect a sales-tracking sheet → it appears as a queryable dataset in /apps/analytics.
Scopes: spreadsheets.readonly spreadsheets
Demo: /apps/analytics renders real-time GA4 metrics. Agent answers "what pages got the most traffic this week?"
Scopes: analytics.readonly analytics
Demo: /apps/websites shows top queries and indexing status. Agent suggests fixes for indexing errors.
Scopes: webmasters.readonly webmasters
Demo: Agent flags a new 1-star review → drafts a recovery reply → you approve → reply goes live on Google Maps.
Scopes: business.manage
Demo: "Create a customer satisfaction form" → Smoo AI builds it via the Forms API → shareable link → responses land in CRM.
Scopes: forms.body.readonly forms.body forms.responses.readonly
Demo: Agent: "Pause my worst-performing campaign." → preview of impact → you confirm → campaign paused via Ads API.
Scopes: adwords
How your data is handled
Per-organization isolation
A Google account is bound to a single organization at a time. We enforce this at the database layer so the same mailbox cannot sync into two different orgs.
Encrypted at rest
OAuth refresh tokens and any cached Google data are stored in encrypted Postgres columns (Supabase pgcrypto).
No human review
Smoo AI engineers do not read your Google data except (a) with your explicit consent, (b) for security investigation, (c) to comply with law, or (d) when fully anonymized for product analytics. We do not use your data to train general AI models.
Revocable at any time
Disconnect from Smoo AI's Integrations settings or directly from Google Account → Third-party apps. Revocation purges cached Google data on the next sync cycle.