Business Gmail in Lumetrin OS.
A business can connect its own Gmail account to Lumetrin OS, so that its owners and administrators can read and find the business’s email under Mail, next to the rest of its work. Access is read-only, and the mail stays in Gmail.
At a glance
- Access
- Read-only. Lumetrin OS cannot send, delete or change email.
- Mailbox
- Each business connects its own Gmail account.
- Who
- Only the business’s owners and administrators.
- Stored
- The address, encrypted access keys and connection records. Never the mail itself.
What it does
Once a business has connected its Gmail account, Mail in Lumetrin OS lets its owners and administrators:
- see the mailbox’s Inbox, or all its mail, as a list of conversations, with each one’s sender, subject, date and preview, and whether it is unread or has attachments;
- search the mailbox by words (Gmail’s search operators are not supported);
- open a conversation and read its messages, with the names and sizes of any attachments;
- open the same conversation in Gmail, to reply or to open an attachment there.
Lumetrin OS reads the mailbox only when one of them connects it (to read the account’s address) or uses Mail. Nothing reads it in the background.
Business Gmail is being made available to Lumetrin OS businesses in stages. If Gmail does not appear under Settings → Integrations, it has not been turned on for your business yet.
Read-only, by design
Lumetrin OS asks Google for one permission only: read-only access to Gmail, which Google’s consent window shows as “View your email messages and settings”. If Google ever grants anything beyond that and basic sign-in information, the connection is refused, and no access keys or address are stored.
- Lumetrin OS cannot send, reply to, forward, delete, archive, move, label or change email. Replies are written in Gmail itself.
- Opening a message in Lumetrin OS does not mark it as read in Gmail.
- Attachments are listed by name and size. Lumetrin OS does not download or open them.
- Email written in HTML is shown as plain text, so images and other content linked from a message are not loaded.
- Drafts, spam and trash are never shown.
- Lumetrin OS does not read or change Gmail settings.
- No artificial-intelligence feature in Lumetrin OS reads Gmail.
One business, one mailbox
- Each business connects its own Gmail account, one at a time. The mailbox belongs to the business, and the business decides whether to connect it.
- No other business can see it. Lumetrin OS works out which business a mailbox belongs to on its own servers, from the signed-in person’s business, never from anything a browser sends.
- The connection belongs to the business, not to the person who made it. If that person leaves, it stays in place until an owner or administrator disconnects it, or Lumetrin removes it (see Disconnecting and removing access).
- This is separate from the mailbox Lumetrin manages for its own addresses, which section 13 of our privacy policy describes.
Who can connect and read it
- Only the business’s owners and administrators can connect, reconnect or disconnect its Gmail, and only they can open Mail. The business’s other staff cannot.
- Owners and administrators can see which Gmail address is connected, in Settings and in Mail.
- Lumetrin’s own staff cannot read a business’s mailbox. Gmail cannot be read, connected or disconnected from inside a support session, even one the business has allowed.
- Lumetrin’s platform administrators can see which Gmail address a business has connected and whether it is working, and can remove the connection. They cannot read the mail.
Connecting Gmail
- An owner or administrator opens Settings → Integrations → Gmail, or Mail, and chooses Connect Gmail.
- Lumetrin OS first explains what it will be able to see, why, and what it keeps. They confirm that they are authorized to connect the mailbox for the business. Lumetrin OS records who confirmed, when, and which version of the explanation they accepted.
- Google’s own sign-in and consent window opens. They sign in to the business’s Gmail account and allow read-only access. Lumetrin never sees the account’s password.
- Back in Lumetrin OS, the business’s mail appears under Mail.
If the account belongs to a Google Workspace organization, that organization’s Google administrator may need to allow Lumetrin OS before it can be connected.
What Lumetrin OS keeps
Mail is fetched from Gmail when Mail is opened, and is not kept: Lumetrin OS stores no messages, subjects, senders, previews or attachments, and writes no email content to its logs. For each connected business, it keeps:
- the connected Gmail address;
- Google’s access keys for the connection, encrypted on Lumetrin’s servers and never sent to a browser;
- connection details: whether it is working, which owner or administrator connected it, and when;
- a record of each time an owner or administrator started connecting: who, when, and which version of the explanation they accepted;
- an audit record of each connection, disconnection and removal, with the Gmail address.
Gmail data is used only to show the business its own mailbox. It is not sold, not used for advertising, and not used to train artificial-intelligence or machine-learning models. Lumetrin OS’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting and removing access
- An owner or administrator can disconnect Gmail at any time from Settings → Integrations, even after Gmail has been turned off for the business. Lumetrin OS deletes the access it stored, in that same step.
- Lumetrin OS also asks Google to revoke the access, unless the same Google account is still connected elsewhere in Lumetrin OS, because revoking it would also cut off that other connection. (Section 14 of our privacy policy lists the other, rarer cases in which Google is not asked.)
- Lumetrin can also remove a business’s stored connection, for example for a business that no one can sign in to any more. A Lumetrin platform administrator must give a reason, which is recorded in the business’s audit record. Removal deletes the stored access and asks Google to revoke it under the same rule as Disconnect. It never opens the mailbox.
- You can always remove Lumetrin OS’s access yourself, on your Google Account’s third-party connections page. A Google Workspace administrator can also remove it for the organization.
- Email stays in Gmail. Because Lumetrin OS keeps no copy, there is no mail to delete from Lumetrin OS.
To ask Lumetrin to delete other information, see our data deletion page or email privacy@lumetrin.com.
Policies and contact
- Privacy policy, section 14: Gmail accounts that businesses connect
- Terms of service, section 7: Third-party services
- Questions, and access or deletion requests: privacy@lumetrin.com
Lumetrin OS is operated by Lumetrin Consulting Services LLC.