What data and access does BLAM8 need?

Two things. First, revocable OAuth consent to the one mailbox you choose — read incoming mail, send the replies you approve — granted on Microsoft's or Google's own consent screen, never via a password. Second, your business knowledge: prices, policies, services and FAQs, pasted or uploaded, so replies quote your real numbers instead of inventing.

Optionally, calendar access for the Scheduling tier, so confirmed bookings land in Outlook or Google Calendar and your busy times block the diary. That is the whole list: no access to other systems, no data migration, and disconnecting a mailbox deletes its tokens and stops all processing.