Google Calendar & Meets Permission Scopes
The Google Calendar & Google Meet integration in Qooper helps users streamline scheduling, synchronize availability, and automatically generate Google Meet links for mentoring sessions and meetings.
To enable these features securely, Qooper requests a limited set of Google OAuth permission scopes during the authentication process.
This article explains each permission scope, why it is required, and how it is used within the platform.
Google OAuth Permission Scopes
1. Calendar Read Access
Permission Scope
calendar.readonly
What This Permission Allows
This permission allows Qooper to read calendar events and availability information from a user's Google Calendar.
Why Qooper Needs It
Qooper uses this permission to:
- Read calendar availability
- Prevent meeting conflicts
- Display available time slots
- Synchronize mentoring sessions with calendars
- Help mentors and mentees find mutually available meeting times
What Qooper Can Access
Qooper can access:
- Event start and end times
- Calendar availability (busy/free status)
- Calendar metadata necessary for scheduling
What Qooper Cannot Do
Qooper cannot:
- Modify calendar events using this permission alone
- Delete calendar events
- Access unrelated Google Workspace data
2. Calendar Event Management
Permission Scope
calendar.events
What This Permission Allows
This permission allows Qooper to create and manage calendar events on behalf of the user.
Why Qooper Needs It
Qooper uses this permission to:
- Create mentoring session invitations
- Automatically generate Google Meet links
- Update meetings when schedules change
- Add meeting participants
- Synchronize Qooper meetings with Google Calendar
- Cancel or modify meetings initiated through Qooper
What Qooper Can Do
Qooper can:
- Create calendar events
- Update events created through the integration
- Add Google Meet conferencing links
- Send invitations to meeting participants
What Qooper Cannot Do
Qooper cannot:
- Access Gmail content
- Access Google Drive files
- Modify unrelated Google Workspace settings
3. Basic User Profile Access
Permission Scope
userinfo.profile
What This Permission Allows
This permission allows Qooper to access basic Google profile information associated with the authenticated user.
Why Qooper Needs It
Qooper uses this permission to:
- Identify authenticated users
- Display names and profile details correctly
- Associate Google accounts with Qooper accounts
- Improve onboarding and integration experience
Information Accessed
This may include:
- Name
- Profile photo
- Preferred language
- Google account identifier
Privacy Notes
Qooper does not access sensitive personal information beyond the standard public profile data provided by Google.
4. Email Address Access
Permission Scope
userinfo.email
What This Permission Allows
This permission allows Qooper to access the authenticated user’s email address.
Why Qooper Needs It
Qooper uses this permission to:
- Verify user identity
- Match Google accounts with Qooper user accounts
- Send meeting invitations correctly
- Associate scheduling actions with the correct user
Information Accessed
Qooper can access:
- Primary Google account email address
What Qooper Cannot Do
Qooper cannot:
- Read email messages
- Access Gmail inbox content
- Send emails through Gmail APIs
Security & Privacy Considerations
Qooper follows the principle of least privilege and only requests permissions necessary to support calendar synchronization and meeting scheduling functionality.
Important Security Notes
- All permissions are granted explicitly by the user through Google’s OAuth consent flow.
- Qooper only accesses data necessary for scheduling and calendar synchronization.
- Qooper does not read Gmail messages or Google Drive documents.
- Access tokens are securely encrypted and stored following industry security standards.
- Users can revoke access at any time through their Google Account security settings.
Why These Permissions Are Necessary
Without these permissions, Qooper would not be able to:
- Check participant availability
- Prevent scheduling conflicts
- Automatically create Google Meet links
- Sync mentoring meetings to calendars
- Update or manage scheduled sessions
- Associate authenticated Google accounts with Qooper users
These permissions enable a seamless scheduling experience while maintaining secure, user-authorized access controls.