# Connections and permissions

> Every connection Sydbar can have, what each lets it do, where it's kept and how to remove it.

Source: https://sydbar.app/docs/connections

Connections live in **Settings → Connections**. Each one belongs to one business; Sydbar never reads or sends across businesses.

## Every connection

| Connection | Belongs to | Sydbar can | Remove it |
| --- | --- | --- | --- |
| Google (Gmail, Calendar, Meet) | One business | Read the mail that matters, send replies you approve, archive and Trash, Gmail labels, see and add calendar events, read Meet transcripts | Settings → Connections → Google → **Disconnect** (Google revokes Sydbar's access), or your Google account's permissions |
| App password mailbox | One business | Read the inbox and send replies you approve (IMAP and SMTP) | Settings → Connections → App password → **Disconnect** |
| GitHub | One business | Read repos you link; write the scope file and milestones when you ask | Settings → Connections → **Disconnect** |
| Linear | One business | Read projects you link; add the scope document and milestones when you ask | Settings → Connections → **Disconnect** |
| Notion | One business | Read pages you import as context | Settings → Connections → **Disconnect** |
| AI key | You | Run Sydbar's AI for the businesses you created, billed by your provider | Settings → AI → **Remove** |
| Agent keys | You | What the agent tools allow, in your businesses | Settings → Agents → **Revoke** |

## Google or app password?

| | Connect Gmail (Google) | App password |
| --- | --- | --- |
| Read and send mail | Yes | Yes |
| Works with | Gmail, Google Workspace | Gmail, Google Workspace, iCloud, Yahoo and most IMAP mail (not Microsoft yet) |
| Archive and Trash in Gmail | Yes | Sydbar only |
| Tags as Gmail labels | Yes | No |
| Calendar, booking pages, Meet transcripts | Yes | No |
| Import signature from Gmail | Yes | No |

A route counts as connected only after a provider check passes. Until then the business can't send replies.

## Signing in is separate

Your Sydbar sign-in (email and password) has nothing to do with these connections. You don't need a Google account to use Sydbar, and you can connect a Gmail account with a different address from the one you sign in with.

## How secrets are kept

Tokens, app passwords and AI keys stay on the server and are never shown in the app again after you connect. Agent keys are stored as a one-way hash. Disconnecting deletes what was stored; your conversations stay.
