Security

We connect to your Google Workspace to provision new users on your behalf. This page is the source of truth for exactly what we ask for and what we do with it.

OAuth scopes we request

• https://www.googleapis.com/auth/admin.directory.user
• https://www.googleapis.com/auth/admin.directory.domain.readonly

admin.directory.user is the minimum scope to create a user in your Workspace. domain.readonly is used to confirm which domain we are working with on first connect.

What we do not do

• We do not read existing user data in your Workspace.
• We do not modify or delete existing users.
• We do not store your access or refresh tokens in plaintext (encrypted at rest, Laravel encrypted casts).
• We do not share, sell, or transmit Workspace data outside of MailProvision's own infrastructure.

Data we keep

• Your account: email, hashed password.
• Per Workspace: domain, encrypted OAuth tokens, configuration (email format, spend cap, accent color).
• Per provisioning: name and recovery email the end-user submitted, plus the email address we created.

Subprocessors

These are the only parties that ever receive your data. We do not sell, rent, or trade it, and we do not share, transfer, or disclose Google Workspace data to anyone else except as required by law.

• Laravel Cloud, hosting and Postgres. Stores the application database, including encrypted OAuth tokens.
• Stripe, subscription billing. Receives billing data, not Google user data.
• Resend, transactional email. Receives the recipient addresses needed to deliver invites and notifications.
• Google, Workspace Admin SDK, called to create the users you ask us to provision.

How we protect this data

• Encryption in transit: all traffic, including our calls to Google APIs, is served over TLS (HTTPS).
• Encryption at rest: OAuth access and refresh tokens are encrypted with Laravel's encrypted casts (AES-256). Passwords are stored only as one-way hashes.
• Access controls: production data is accessible only to authorized personnel, and each workspace's data is isolated to that account.
• Minimization and deletion: we request the narrowest Google scopes needed, and OAuth tokens are deleted within 24 hours of disconnecting a Workspace.

Limited Use

MailProvision's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Workspace data for advertising, and we do not transfer it to others except to provide or improve MailProvision for you, to comply with applicable law, or as part of a merger or acquisition.

Pilot disclosure

MailProvision is currently in Google's OAuth verification process. During this period the consent screen displays an "unverified app" warning. We are working through Google's review queue and will update this page when verification is complete.