Connecting an assistant does not hand over your account. This page explains the
limits that hold whatever you tick on the consent screen.
Your password is never shared
You sign in on a Flow9 page in your own browser. The assistant receives its own
key, scoped to what you approved and revocable on its own. It never sees your
password, and revoking the assistant does not affect your login.
Sending SMS, sending email and placing calls are not available through an
AI connection. Not restricted by default — absent. Those tools are not offered
to any assistant, so no prompt, permission or mistake can trigger outreach to
your customers.
Nothing is deleted permanently
When an assistant deletes a record, it is not destroyed:
- The record is marked as deleted and hidden from view
- A deletion request appears for an administrator
- It stays restorable until an admin approves it
An assistant cannot approve its own request, and it cannot bypass the queue.
Deletion is also off unless your workspace has enabled it separately from
writes.
It only sees your workspace
Every request is scoped to the workspace you signed in to. There is no way for
an assistant to reach another company’s data, and no way to widen that scope
from the assistant’s side.
Everything is recorded
Actions taken by an assistant are written to the activity timeline on the record
they touched, alongside actions taken by people. If a lead’s status changed last
Tuesday, you can see that it was changed through an AI connection and by whom.
Taking access away
Settings → Connected Apps lists every assistant with access. Revoke removes
its key immediately — the next request it makes fails, even if the connector is
still listed on its side.
An admin can also switch off AI access for the whole workspace at once, which
ends every connection at the same time. See
Enabling AI connections.
If you think something is wrong
Revoke first, ask questions afterwards — revoking costs nothing and reconnecting
takes a minute. Then contact us at
hello@flow9.online.