How Verification Works
GhostedBoard verifies report timing using Gmail metadata only. We do not read email body content or attachments.
Data Access Scope
- OAuth scope: `https://www.googleapis.com/auth/gmail.metadata`
- Read-only metadata fields: headers, dates, sender domains, recipient domains
- No body text, no attachments, no mailbox modification permissions
Ghosting Threshold
- Requires at least one prior confirmed exchange with the company domain
- Candidate's latest outreach date is derived from verified metadata
- Ghosting = no company-domain reply within 14 days after candidate's last outreach
- If company email is sent after candidate's latest outreach, it is not classified as ghosting
What We Store
- Verification outcome (`verified` or unverified reason)
- Domain match result
- Derived last contact date
- Derived response gap in days