What access does the team get when I connect a service?
Scoped access — not full account control. GitHub integration can push to repos you authorize but can't delete organizations. Stripe can read transactions but can't issue refunds without your approval. Messaging integrations can send on your behalf but can't read your DMs.
What data does the team actually see?
Only task-relevant data. For a competitor analysis, Riley reads your market notes, not your email. For a blog post, Casey reads your brand voice notes, not your calendar. The team doesn't scan your inbox, files, or activity unless it's directly relevant to a task.
Can I disconnect an integration?
Yes, anytime from Tools → Connectors. When disconnected, the team loses access immediately.