Connect your email is where most people leave, and they are right to hesitate.
You have seen the permission screen. A logo you half recognise, then a list: read, compose, send, delete. Somewhere behind that list is the thread with your lawyer, the one with your co-founder about the co-founder you let go, an offer letter, a medical appointment. The product wanted one small thing from you, and the button asked for all of it.
Most people close the tab. That is not paranoia. It is a correct reading of what was requested.
The reason the request is so large is usually that nobody separated two different questions hiding underneath it.
Who you know is answerable from headers. What was said is not, and we do not ask.
Headers are the envelope: who wrote to whom, when, how often, and whether anyone replied. That is enough to establish that you and a buyer have exchanged messages steadily for two years and that the last one was on Tuesday. Bodies are the letter: what those messages actually said. To know that a relationship is real and current, you need the envelope. You do not need the letter.
So the permission Deals On asks Gmail for is gmail.metadata. It is narrower than read-only, and it structurally cannot return a message body. This is not a promise not to look. The scope does not hand the body over.
And in case anyone on our side ever made a mistake, the internal type for a swept message has no body field at all. There is nowhere to put one by accident.
That is the first door. The second one is the way out, and it matters just as much, because a product that is easy to enter and vague about leaving has told you something about itself.
When you disconnect a mailbox, what that mailbox taught us is deleted. If you connected two and disconnect one, what the other one taught us stays, because you did not ask us to forget that. Leaving is specific rather than all or nothing, and it is the same shape as joining: you decide which door, and it only moves that far.
It is fair to ask what is left once you take the letter away, and the answer is: most of what actually matters for a deal.
An investor publishes one link with two channels, raising a round and looking for a role, three questions each, in his words. Then one line for what he will never fund. Forty submissions arrive in the first week. He reads eleven. The other twenty-nine were not filtered by a model’s opinion of them; they were scored against what he said he wanted, and the ones his exclusion line caught scored zero before anything else was considered.
A fortnight in, a founder he likes goes quiet. He does nothing about it, because people are busy and it does not feel urgent. That night the agent notices that the deal has sat past its stage budget, and it says so in the morning. Noticing that required knowing when things happened, and it did not require reading a word of anyone’s messages.
This is the part people expect to be a trade, and it is not much of one. The reading that a deal needs is mostly structural: who, when, how often, still open or gone quiet, eligible or not. The reading that feels invasive is mostly not needed.
There is one more limit worth stating in the same breath, because it is the other half of the same promise. Nothing goes out under your name without you. The agent cannot make first contact with a stranger on your behalf, at any setting, and there is a separate post about where exactly it stops.
Hesitating at that button was the right instinct. The fix was never to talk you out of it. It was to ask for less.
