Only what the features you can see actually require:
- Mail — read and organise (mark read, archive, label): how your inbox gets triaged. This permission does not allow permanent deletion or account-settings access.
- Mail — send: how a draft you approved leaves the building.
- Calendar — read and write: sync your schedule, create and move events when you ask.
- Docs and Drive search (Google): read or create documents when you ask Nell to work with one.
Signing in with Google or Microsoft is separate and identity-only — it never grants mailbox access. The full scope-by-scope table, including what we deliberately don't request, is in the Privacy Policy.