Gmail AI Assistant Guide - What Works and What to Check
Gmail has several built-in AI features, and dozens of third-party tools integrate with it via OAuth. This guide covers what Gmail's own AI does, what third-party tools can access, what permissions to check before connecting anything, and how to manage your privacy settings.
Gmail has more built-in AI features than most users realize, and a large ecosystem of third-party tools that connect via OAuth to extend its capabilities further. Understanding what each category does - And what it costs you in terms of data access - Helps you make better decisions about which features to use and which tools to trust with your inbox. Before connecting any third-party tool to Gmail, it is worth reading the full guide on AI email safety and permissions - It covers exactly what each permission scope means in practice. If you use Outlook instead, the equivalent guide is the Outlook AI assistant guide.
Gmail's built-in AI features
Google has integrated several AI features directly into Gmail over the last few years. These sit within Google's infrastructure and are governed by your Google account and Workspace settings, rather than by a separate third-party privacy policy:
- Smart Compose. Autocomplete suggestions that appear inline as you type. The suggestions are generated based on what you are writing and general language patterns. You can accept a suggestion with Tab or ignore it by continuing to type.
- Smart Reply. Short suggested reply options shown below incoming messages. Useful for quick responses, but the suggestions are intentionally brief and generic - They will not match your voice.
- Help me write (Gemini). A more capable drafting feature that can write or refine full email replies. Requires a Google Workspace subscription with Gemini enabled. This feature sends your email content and instructions to Google's Gemini models.
- Gemini thread summaries. Summarizes long email threads. Also requires a Workspace subscription. The feature reads the full thread content and passes it to Gemini to generate the summary.
| Feature | What it does | Privacy note |
|---|---|---|
| Smart Compose | Autocomplete suggestions as you type | Runs on Google's servers; text you type in Gmail is processed by Google |
| Smart Reply | Quick reply options below incoming emails | Google analyzes incoming email content to generate suggestions |
| Help me write (Gemini) | Draft full replies based on your instructions | Requires Workspace subscription; content is sent to Google's Gemini models |
| Gemini summaries | Summarize long email threads | Requires Workspace; reads and processes the full thread |
Gemini for Workspace tiers
Google's AI features are not all available on the same plan. Understanding which tier includes what helps you assess whether upgrading makes sense or whether a third-party tool is more cost-effective for your needs.
| Plan | Gemini features included | Notes |
|---|---|---|
| Google Workspace Business Starter / Personal Gmail (free) | Smart Compose, Smart Reply only | No "Help me write" or thread summaries |
| Workspace Business Standard / Plus | Smart Compose, Smart Reply | Full Gemini requires the Gemini add-on or upgrade |
| Workspace with Gemini Business or Enterprise add-on | Help me write, thread summaries, full Gemini in Gmail | Additional per-user monthly cost; administrator must enable for the domain |
| Google One AI Premium (personal) | Gemini in Gmail for personal accounts | Monthly subscription; unlocks Gemini features in personal Gmail |
If you do not have a Workspace subscription that includes Gemini, you will not see the "Help me write" button or the thread summary panel. Paying for a Gemini add-on is one option; using a capable third-party tool is another, often at lower cost per user.
Smart Compose and Smart Reply privacy - A closer look
Smart Compose and Smart Reply are often assumed to be low-risk because they are built-in. They are lower risk than a third-party tool with full inbox access, but they are not zero-risk in privacy terms. Both features involve sending content to Google's servers for processing.
Smart Compose analyzes what you are typing as you compose an email and sends that text to Google to generate autocomplete suggestions. This means partial drafts of your emails, including names, figures, and content you may not finish or send, are processed by Google as you type. Google's privacy policy and your Workspace agreement govern what Google does with this data.
Smart Reply analyzes incoming email content to generate short suggested replies. The content of emails other people send you is processed by Google to produce those suggestions, within the terms of Google's privacy policy.
For most personal Gmail users, this is an acceptable trade-off for the convenience. For users handling sensitive professional correspondence - Legal, medical, financial, or confidential business - It is worth considering whether to disable these features via Gmail Settings. The path is Settings (gear icon) → See all settings → General → Smart Compose and Smart Reply sections.
Third-party AI tools for Gmail
Third-party tools add capabilities beyond what Gmail's built-in features provide - More sophisticated reply drafting, inbox triage, personalization based on your writing style, and integration with other tools. They connect to Gmail via OAuth, the same authentication flow that any app uses when you click "Sign in with Google." During the OAuth flow, you see and approve a list of permissions the tool is requesting. This is the critical moment where you should read carefully rather than click through.
The permissions a third-party tool requests determine what it can access and do. Tools that offer inbox triage or thread summarization typically need read access to your full inbox. Tools that can send replies on your behalf need write access. Word.now's free reply generator is an exception: it works without any Gmail OAuth connection. You describe your goal and key points; Word.now generates a draft. No inbox access is required at any point, which makes it usable alongside a work email account even when IT policy restricts third-party access.
How the OAuth connection works - Step by step
When you connect a third-party tool to Gmail via OAuth, the following steps happen:
- You initiate the connection by clicking "Connect Gmail" (or equivalent) in the third-party tool's interface.
- You are redirected to a Google sign-in page. If you are already signed in to Google, you may go directly to the permissions screen.
- You see a permissions consent screen. This lists every permission the tool is requesting. Read this carefully. The permissions listed are exactly what the tool will be able to do.
- You click "Allow." Google issues the tool an access token - A credential it can use to make API requests to your Gmail account within the permissions you approved.
- The tool now has ongoing access within the approved scope until you revoke it. The tool does not need your password and does not need to re-request your approval each time it accesses your account (unless its token expires, in which case you may be prompted to reconnect).
Revoking access removes the tool's token, immediately ending its ability to access your account. Revocation does not delete data the tool has already collected. For data deletion, contact the tool vendor directly and refer to their privacy policy.
Gmail permissions explained
The permission text on Google's OAuth consent screens uses specific language. Here is what the most common descriptions mean in practice:
| Permission text | What it means | Risk level |
|---|---|---|
| "Read, compose, send, and permanently delete all your email from Gmail" | Full read-write access. The tool can do anything with your email including sending and deleting. | High |
| "Read all resources and their metadata - No write operations" | Read-only access to all messages. Cannot send, move, or delete. | Medium |
| "View your email messages and settings" | Read access to email and some settings. Does not include write access. | Low-medium |
| "Manage drafts and send emails" | Can create drafts and send email from your account. High-risk despite sounding mild. | High |
| "View your email address" | Can see your email address only. Used for account identification, not inbox access. | Very low |
For a full guide to both Gmail and Outlook permissions, see Is AI email safe? - Permissions explained.
Setting up safely
Follow this checklist before connecting any AI tool to your Gmail account:
Privacy settings walkthrough
Here are the exact paths to Gmail's AI privacy settings and third-party access management:
Disable Smart Compose: Open Gmail. Click the gear icon (top right). Select "See all settings." On the General tab, scroll to the "Smart Compose" section. Select "Writing suggestions off." Click "Save Changes" at the bottom of the page.
Disable Smart Reply: Same path as above. On the General tab, scroll to the "Smart Reply" section. Select "Smart Reply off." Click "Save Changes."
Disable Gemini features (if available on your plan): Open Gmail Settings → See all settings → Gemini in Gmail (if the tab is visible). Toggle off any features you do not wish to use. Note: in Workspace environments, your administrator may control which Gemini features are available.
Review and revoke third-party app access: Go to myaccount.google.com/permissions. Under "Third-party apps with account access," you will see every app that has been granted OAuth access to your Google account. Click any app to see its permissions and, if needed, click "Remove access." This takes effect immediately.
Gmail AI vs third-party tools - When to use which
Choosing between Gmail's built-in AI and a third-party tool is a practical decision that depends on your situation:
| Situation | Recommendation | Why |
|---|---|---|
| You want quick reply suggestions without setup | Gmail Smart Reply | Already in your inbox, no connection needed, zero extra cost |
| You have a Workspace plan with Gemini and want drafting help | Gemini "Help me write" | Already included in your plan, processed within Google's infrastructure |
| You want drafts that match your personal writing style | Third-party personalized tool or Word.now | Gmail's built-in AI is not personalized to your style; third-party tools with saved examples produce more natural output |
| You use a work account with IT restrictions on third-party apps | Word.now free reply generator | No Gmail OAuth required; works from information you type, not inbox access |
| You want inbox triage or smart filtering beyond Gmail's Priority Inbox | Third-party tool with read access (e.g. SaneBox) | Gmail does not offer ML-based triage that learns from your behavior beyond Priority Inbox |
Works without a Gmail connection. Describe the email you received and what you need to say - Get a personalized draft in seconds.
If you want the full Word.now Gmail integration - Inbox triage, reply drafts, and style learning - See the Word.now Gmail AI assistant feature page. If you are evaluating Gmail's AI features against Google's own Gemini product, the comparison page on Word.now vs Gemini for Gmail goes through the feature differences in detail. For Outlook users, see the Outlook AI assistant guide.