"Connect my Gmail to an AI? But it's going to read everything!" That's a healthy worry. Before plugging anything in, you have the right to know exactly what an agent can see, do, and above all what it can't. Let's break it down simply.
What does "connecting" an app actually mean?
Imagine giving a spare key to a trusted neighbor. You're not giving them access to your whole life: you're saying "you can come in to water the plants, that's it". Connecting an app works the same way.
When you link Gmail, Notion or HubSpot to an agent, you grant it a specific permission. Not full access to your digital life. A defined scope, that you choose.
With chyll, these connections happen in one click, through more than 1000 integrations. But "one click" doesn't mean "without control". Quite the opposite: you're the one making that click, with full knowledge of what it does.
What the agent sees (and what it doesn't)
In practice, permissions fall into two families: read and write. Here's what that looks like per tool.
| App | The agent can read | The agent can write |
|---|---|---|
| Gmail | your emails, to prepare a reply | a draft (never a send without you) |
| Notion | the pages you authorize | a note, a record |
| HubSpot | your contacts, your deals | a record update |
Crucial point: the agent only sees what the connection allows. If you only connect Gmail, it knows nothing about your accounting. If you limit access to a single Notion workspace, the rest stays invisible to it.
And an agent isn't a nosy human snooping around. It's a tool that looks only at what it needs for the task you give it.
You approve, you unplug whenever you want
Two guardrails are worth their weight in gold.
First, nothing goes out without your go-ahead. The agent prepares a draft email, follow-up, or record. You read it. You approve it. Until you've clicked, nothing leaves for the outside world.
Second, you unplug whenever you want. A connection isn't a marriage. A doubt, a finished project, an app you no longer use? You cut off access in a few seconds, and the agent instantly loses that visibility.
You grant the access. You take it back. At no point do you lose control.
Add to that the fact that chyll is hosted in Europe, GDPR-compliant, that your data is never used to train models, and that your business is learned once then remembered, without you having to re-explain everything.
The right reflex: open up gradually
No need to connect everything on day one. Start small: plug in the tool that saves you the most time right away (often your inbox or your invoicing). See how it goes. Add the rest when you're comfortable.
Connecting an app isn't opening a door onto everything. It's handing over a specific key, for a specific room, to a colleague who will never send anything out without asking you. And that key, you can take back at any time.