1. What happens when you click "Allow"
2. How to connect Gmail to ChatGPT safely in 5 steps
3. Disconnect Gmail when the task is done
4. The one risk to know: emails that give your AI orders
This is the practical answer to the second question from my last post: "Whose key is it using?"
What happens when you click "Allow"
Connecting Gmail is closer to handing over a house key than logging in. The app gets a pass that keeps working after you close the tab, until you remove it.
In 2025, attackers stole these passes from a sales tool called Salesloft Drift and used them to read email. Google was not hacked. The connection was the way in.
How to connect Gmail to ChatGPT safely in 5 steps
Sarah, an HR consultant, wants ChatGPT to summarise her clients' emails every morning.
Write a five-part prompt
Use the job, tool, categories, output and boundary shape from blog 7. Sarah's: "Summarise my unread client emails from the last 24 hours in my business Gmail. Sort them into reply today, can wait and for information. Give me a short list with sender and what they need. Do not reply to, send, forward or delete anything."
Read the permission screen
If you see checkboxes, keep "View your email messages and settings" and untick anything that sends or deletes. ChatGPT shows one broad permission with nothing to untick (OpenAI help), so Step 3 matters most.
Make sending wait for you
ChatGPT: Settings > Plugins > Ask permission > Always ask.
Claude: Customize > Connectors > Gmail. Set send and forward to Needs approval.
Test it
Ask it to reply to a client email. A permission card should appear. Click Deny. If the reply went out, redo Step 3.
Disconnect when the job ends
See the next section.
Disconnect Gmail when the task is done
Take the key back when the job is finished. Reconnecting takes a minute, and you repeat Steps 2 to 4 when you do.
| Where | How to disconnect |
|---|---|
| ChatGPT | Settings > Plugins > Gmail > Disconnect |
| Claude | Customize > Connectors > Gmail > Disconnect |
| Google (do this too) | myaccount.google.com/linkedapps > select the app > See details > Remove access |
Does disconnecting delete your emails?
No. It stops new access, but anything the AI already read stays in your chats.
| Your data | After you disconnect |
|---|---|
| Your inbox | The app can no longer read it. |
| Emails used in a chat | Stay in that chat until you delete it (Claude, OpenAI). |
| Deleted chats | Removed from Claude's systems within 30 days (Claude privacy). |
| Memory | Deleting a chat does not delete what Claude remembered from it. Check Settings > Memory (Claude help). |
| Model training | Anthropic says it does not train on Gmail, Drive or Calendar connector data. On Free, Pro and Max plans, email content you copy into a chat can be used for training if Model Improvement is switched on in your privacy settings (Use Google Workspace connectors, Claude Help Center). |
1. Disconnect in the AI tool and at myaccount.google.com/linkedapps.
2. Delete chats that contain email content.
3. Delete anything email-related in Settings > Memory.
The one risk to know: emails that give your AI orders
AI cannot reliably tell information from instructions, so anyone who emails you can hide orders for your agent. This is called prompt injection, and researchers have shown it working on Gmail's own AI summaries.
- Treat summaries as notes. Open the original email before you call, click or pay.
- Read before you approve. If you did not ask for it, click Deny.
- Automations need an approval step before anything sends, in Zapier, ⚡ Make.com or n8n.
This post contains affiliate links. I only recommend tools I use or would use myself.
Set sending to ask you first: ChatGPT (Settings > Plugins) or Claude (Customize > Connectors). Two minutes.
Your monthly 10-minute check
Remove apps you no longer use
Go to myaccount.google.com/linkedapps and remove anything you do not recognise or have stopped using.
Make sure your email is not being copied to someone else
A forwarding rule quietly sends a copy of every new email to another address. In Gmail, click the gear icon > See all settings > Forwarding and POP/IMAP. If an address is listed that you do not recognise, select Disable forwarding and click Save changes.
Check your filters
In the same settings, open Filters and Blocked Addresses. Delete any filter you did not create that forwards or deletes mail.
Frequently Asked Questions
Google Threat Intelligence, "Widespread data theft targets Salesforce instances via Salesloft Drift", August 2025
0DIN, "Phishing for Gemini", July 2025
OpenAI Help Center, "Apps in ChatGPT" and "Google app data controls FAQ"
Claude Help Center, "Connectors", "Google Workspace connectors" and "Chat search and memory"
Claude Privacy Center, "How long do you store my data?"
Know what your agents can reach, and make sure nothing leaves without you. Ready to build one? Start with the email and calendar agent, or what AI agents actually are if you are new here.
— Linda
AI Explorer & Educator, Linda & AI
Linda Ghusayni, Founder, Linda & AI. Former Training Programme Manager at Microsoft and senior roles at Expedia and Citi · Co-founded a career training platform that secured a Big Four consultancy deal · Now teaching professionals how to use AI agents without a technical background at lindaandai.com.