Inbox access for teams
Let your team work your inbox. Never share your password.
ChamsPilot connects your personal Gmail, Outlook or SMTP and lets you add team members with surgical permissions. They can triage and reply on your behalf inside our app. Your password never leaves you, and you can pull access in one tap.
- Your password stays yours: We connect via Google and Microsoft OAuth. No part of ChamsPilot ever sees, stores or asks for your email password.
- Permissions enforced server-side: Every reply, forward and delete is gated by a backend permission check. Hiding a button in the UI is not enough · we block the API call too.
- One-click revoke: Remove a teammate and their session is killed across all devices instantly. You never have to rotate the underlying email account.
Sharing your Gmail or Outlook password is a security incident in disguise
- Your password unlocks everything: Once a manager has your Gmail password they can also read banking emails, reset passwords on every other service, log in from any device and bypass your 2FA app. Email is the master key of your online life.
- You lose every audit trail: When two people share one login, you cannot prove who sent which email. If a deal goes sour or a contact complains, there is no log saying it was the assistant and not you.
- Google and Microsoft will flag you: Logins from a new city or device trigger security checks, password resets and account lockouts. Your team loses access right when you need them most.
- Revoking access means changing the password: If a team member leaves you have to rotate the password and reconfigure every app and device that used it. Most people never get around to it · the ex-employee keeps the keys.
- Forwards and deletes are unstoppable: Once someone is logged in as you they can forward any email to themselves, archive contracts, or empty Trash. There is no UI switch in Gmail or Outlook that says 'this person cannot forward'.
- Two-factor codes leak: To share a Gmail login you usually have to share the recovery phone or authenticator too. Now the second factor is the second leak.
Pick exactly what each team member can do · nothing more
ChamsPilot connects your Gmail, Outlook or SMTP via the official APIs you authorise. Team members log in with their own credentials and act through our app. Every action runs through a permission check on the backend, not just a hidden UI button.
- Reply on your behalf: Lets a teammate respond to an email thread you have already started. The send still goes from your address with your signature, but the action is logged under their name in the audit trail.
- Forward emails: Separate flag from Reply. A creator can let an assistant reply to brand DMs but block them from forwarding contracts, pitches or contacts outside the team.
- Delete and trash: Off by default. Without it, a team member cannot empty your inbox, send threads to Spam, or hide bad-news emails from you.
- Compose new emails: Optional. Reply-only assistants stay reactive · they cannot blast your contacts cold from your address.
- Use AI features (drafting, summarising): Inbox AI can draft replies, summarise threads and detect deal intent. Toggle this per teammate to control which seat burns AI credits.
- Send saved drafts: A manager can save a draft for you to review, while a junior teammate is blocked from clicking Send until you approve.
Built for creators, brands, agencies and busy CEOs
Creators · You want a manager triaging brand DMs · not blasting your followers
Connect the Gmail or Outlook you use for brand deals. Your manager logs into their own ChamsPilot account and can reply, summarise and tag, while forwards, deletes and cold outreach stay off.
- Manager replies from your address with your signature
- Cannot forward your contracts or contacts anywhere
- Cannot delete or hide emails from you
- Revoke access in one click when the contract ends
Brands · Marketing leads handle creator outreach without touching your CEO's mailbox
The brand inbox stays under one set of credentials. Marketing, partnerships and finance each see only the slice they own and only the actions they need · perfect for SOC 2 and CASA audits.
- Scoped per role (partnerships, finance, comms)
- Audit trail per team member for every reply, forward and delete
- No password sharing · meets enterprise security policies
- Plug into Gmail, Outlook 365, or any SMTP/IMAP
Agencies · Account managers run multiple creator inboxes without ever seeing a password
Each creator client connects their own Gmail or Outlook to your agency workspace. Account managers triage and reply, while delete and forward stay locked so contracts never leak to a competitor.
- One workspace, many client inboxes
- Per-creator permission profiles
- Hand off to a new account manager in one click
- Client retains full ownership · can disconnect any time
Executives & founders · An assistant that drafts replies without ever clicking Send
Your executive assistant drafts everything, you approve. Drafts sync to your real Gmail or Outlook Drafts folder so you review them on your phone in your own client. They cannot send until you say so.
- Drafts only · no auto-send
- AI assist on every draft (tone, brevity, deal intent)
- Mobile review in native Gmail or Outlook apps
- Revoke instantly · no IT ticket needed
Four steps · zero passwords shared
- Connect your inbox: Authorise Gmail, Outlook or your SMTP/IMAP in ChamsPilot. We use the official OAuth flows, so your password never touches our servers.
- Invite your team: Send invites by email. Each teammate creates their own ChamsPilot login with their own password and 2FA.
- Pick their permissions: Toggle Reply, Forward, Delete, Compose, Use AI and Send Drafts per teammate. Defaults are minimal so you opt in to risk, not out.
- Revoke any time: Remove a teammate in one click. Their access disappears instantly · no password rotation, no IT ticket, no leftover sessions.
Stop sharing passwords. Start sharing permissions.
Connect your Gmail, Outlook or SMTP, invite your team, and decide exactly what each person can do. No password leaves you. No surprises. No leftover access when someone moves on.
Free to start · cancel team access anytime · no card required
Frequently asked questions
Can I share my Gmail with my manager safely without giving them my password?
Yes. Connect your Gmail to ChamsPilot via Google's official OAuth flow, then invite your manager as a team member with the exact permissions you choose (for example, reply and AI assist, but no forward and no delete). They log in with their own ChamsPilot account and your Gmail password never leaves you.
Does this work with Outlook and Microsoft 365?
Yes. ChamsPilot connects to Outlook personal accounts and Microsoft 365 work accounts via Microsoft's official OAuth. The same granular permission model applies · reply, forward, delete, compose, send drafts and AI use can each be toggled per teammate.
What about a custom SMTP or company email server?
Supported. You can connect any IMAP/SMTP mailbox by entering the host and credentials once. ChamsPilot stores them encrypted at rest, and team members never see the SMTP password · they only see the actions you allow them to take.
Can I stop my team from forwarding emails to themselves?
Yes. Forward is a separate permission from Reply. Turn it off and the API call to forward (or compose with a Fwd: prefix) is blocked on the server. The UI button is also hidden, but the real defence is the backend gate so even a curl request will return 403.
What happens when a team member leaves?
Open the team panel and click Remove. Their ChamsPilot session is killed everywhere immediately, and they lose all access to your connected inboxes. You never have to change your underlying Gmail or Outlook password.
Will Google flag my account if a team member logs in from a different country?
No. Your team members never log into Gmail directly · they log into ChamsPilot. Google sees only one OAuth-authorised app accessing your inbox, exactly as you authorised on day one.
Can my team members see emails I want to keep private?
Not if you scope it. You can give a teammate access to specific folders or labels only, and Inbox AI respects that scope server-side. Personal threads stay invisible to them.
Is there an audit log?
Yes. Every reply, forward, delete, draft send and AI action is logged against the team member who performed it · not against your account. If anything goes wrong, you know exactly who did what and when.
How is this different from Gmail delegation or Outlook shared mailboxes?
Native Gmail delegation gives a delegate near-full access · they can send, archive and even read attachments with no per-action permission system. Outlook shared mailboxes are mailbox-wide, not per-action. ChamsPilot is the layer that adds true granular permissions on top of either provider, with a unified audit trail and one-click revoke.
Add your team safely
ChamsPilot features
Read in another language: Français Español العربية 简体中文 繁體中文