Strilio logo
Strilio Mailbox and scheduling verification

Public page for provider reviewers

Secure mailbox and appointment sync for customer-facing CRM teams.

Strilio lets authorized users connect a work mailbox and, where enabled, appointment scheduling access so customer conversations and meetings can be managed inside the CRM without leaving the workspace.

Public homepage available Privacy policy available Terms of service available User data deletion flow available
Open reviewer CRM path Open CRM home Open privacy policy Open support page

How to test the OAuth consent workflow

  1. Open the reviewer CRM path: start Google Calendar reviewer flow.
  2. Sign in to the CRM with the reviewer account credentials provided separately.
  3. Confirm the Google connect dialog and click Verder naar Google.
  4. Google consent should open for the exact redirect URI /oauth/email/callback on https://app.strilio.io.
  5. After consent, the user is redirected back to https://app.strilio.io/oauth/email/callback and then returns to Email Settings.

What the integration does

  • Links a business calendar or mailbox to the CRM after an explicit user sign-in and provider consent flow.
  • Supports manual iCloud mailbox setup only where the product explicitly offers that option; no Apple OAuth scopes are requested today.
  • Reads provider identity details to show which calendar or mailbox was connected by the user.
  • Uses Google OAuth only for Google Calendar scheduling and appointment management.
  • Reads, creates, updates, and deletes appointments where calendar scheduling is enabled for the connected account.
  • Handles outbound email and inbound routing separately from the Google Calendar connection.

What the integration does not do

  • It does not buy, sell, or broker mailbox data.
  • It does not use Google Workspace, Microsoft 365, or Apple iCloud-connected data for ads or unrelated profiling.
  • It does not expose one tenant's mailbox content to another tenant.
  • It does not use connected mailbox or calendar content for generalized AI or machine learning model training.
  • It does not allow unrestricted human review of provider content outside support, security, legal, or abuse-handling needs.
Provider Requested delegated access Why access is needed
Google openid, email, profile, https://www.googleapis.com/auth/calendar.events To identify the connected Google account and let the user read, create, update, or delete calendar events they manage inside the CRM.
Microsoft offline_access, openid, profile, email, User.Read, Mail.Read, Mail.Send, Calendars.ReadWrite To identify the connected Microsoft 365 account, read or send mailbox content, and read, create, or update appointments the user manages inside the CRM.
Apple iCloud Manual provider configuration only at this time. No Apple OAuth scopes are requested for this flow. Where enabled, to let a user manually connect an iCloud mailbox for the same user-facing inbox context inside the CRM.

Google Workspace API data use

Google Workspace data, specifically Google Calendar data where enabled, is used only to provide user-facing appointment scheduling inside the CRM. It is not transferred or repurposed for unrelated use cases.

Human access and support

Human review of provider content is limited to support, security, abuse prevention, reliability, or legal compliance needs. Access tokens are handled over HTTPS, tenant access is separated in the application, and access is limited to authenticated users with a valid workspace membership.

User controls

Users can disconnect a mailbox or calendar from the product and revoke provider access from Google or Microsoft at any time. Apple iCloud users can remove the manual connection and rotate or revoke related app-specific passwords separately. The public deletion process is documented separately.

Deployment notes

  • Use this same production domain for your public homepage, privacy policy, terms, and redirect URI.
  • Reviewer Google Calendar connect URL: open reviewer flow.
  • Redirect URI path in the current product: /oauth/email/callback.
  • Keep the consent screen, requested scopes, demo video, and this public page aligned before submitting for review.
  • Support contact for reviewers: support@strilio.io.
  • Privacy contact for reviewers: support@strilio.io.
Important: This page explains the current Google Calendar scheduling use case in the product. If the requested scopes, providers, or data handling change, update this public site before resubmitting for provider verification.