Google OAuth
When you connect your Gmail inbox to Kolvera, Google may show a screen that says “Google hasn’t verified this app”. This is completely normal and does not mean Kolvera is unsafe.
Why does this appear?
Google requires all apps that access Gmail data to complete a verification review. This process takes several weeks and applies to every new app — from one-person startups to enterprise platforms. Until the review is complete, Google displays the warning as a standard precaution. Kolvera’s Google Calendar integration has completed this review. Gmail verification is in progress.
Is it safe to proceed?
Yes. Kolvera only requests the minimum permissions needed:
- Gmail — Send campaign emails from your real address, and detect replies so campaigns auto-pause.
- Google Calendar — Create calendar events when you mark a contact as “Booked”.
All OAuth tokens are encrypted at rest using AES-128-CBC. Kolvera never stores your Google password, and you can disconnect at any time from Settings or Integrations.
How to connect Gmail
- Click Connect Gmail in Settings.
- Sign in with your Google account.
- On the warning screen, click Advanced (bottom-left).
- Click Go to Kolvera (unsafe).
- Review the permissions and click Allow.
Google Calendar connects without this warning — it’s already verified.
The word “unsafe” is Google’s default label for any unverified app — it does not reflect a specific risk with Kolvera.
Further reading
- Google Support — Unverified Apps — Google’s own explanation of the warning
- Simply Schedule Appointments — Google Verification Guide — another SaaS app explaining the same warning to their users
- Nylas — “Google Hasn’t Verified This App” Explained — email infrastructure provider confirming this is standard
- Kolvera Security & Privacy — how we protect your data