Google Workspace

formto delivers responses to Google Sheets, Google Drive, Google Docs, Google Calendar, Gmail, Google Contacts and Google Tasks, and posts them to Google Chat. formto hosts no forms of its own in Google: every product is a place a response is sent to after someone submits your form.

What each product asks Google for

formto asks for the smallest access each product needs, and only when you add that product to a form from its Connections page. Signing in to formto with Google asks for your name and email address only (openid email profile), never a product.

• Google Sheets adds a row per response to a spreadsheet formto creates. It asks for https://www.googleapis.com/auth/drive.file.
• Google Drive uploads each response's files to a folder formto creates. It asks for https://www.googleapis.com/auth/drive.file.
• Google Docs appends each response to a document formto creates. It asks for https://www.googleapis.com/auth/drive.file.
• Google Calendar creates an event from a date or time field, in a calendar formto creates, with an optional Google Meet link. It asks for https://www.googleapis.com/auth/calendar.app.created.
• Gmail auto-reply sends one reply from your Gmail address to the person who submitted. It asks for https://www.googleapis.com/auth/gmail.send.
• Google Contacts adds the person who submitted to a contact group formto creates. It asks for https://www.googleapis.com/auth/contacts.
• Google Tasks creates a task per response in a task list formto creates. It asks for https://www.googleapis.com/auth/tasks.
• Google Chat posts each response to a space through its incoming webhook. It asks Google for nothing: you paste the space's webhook URL.

Sheets, Drive and Docs share one access, so adding one of them lets formto add the others without asking again. Each other product asks once, the first time you add it.

What formto never reads

formto never reads a mailbox, a calendar, Drive files or contacts it did not create. With drive.file Google only lets formto open files it created or that you picked for it. With calendar.app.created formto sees only the calendar it created. With gmail.send formto can send mail but cannot read any. The Contacts access is used only to look up the submitter's email address, so a returning person is added to the group instead of created twice; formto never changes or deletes a contact it did not create.

Disconnecting

Settings lists each Google account the workspace delivers to and what its access covers. Disconnect revokes formto's access at Google at once. Deliveries to that account stop, and you can connect it again from any form's Connections page. You can also remove formto at any time from your Google Account under Security, Third-party apps.