Why I Killed JobTrackker's Gmail Sync, Two Weeks Before Launch
For most of JobTrackker's build, Gmail sync was the pitch. Connect your inbox, and job application emails would get picked up automatically — no more manually copying details off Naukri or LinkedIn alert emails into a spreadsheet. It was the thing that made JobTrackker feel different from a Kanban board with extra steps.
Two weeks before I'd planned to open this up publicly, Google sent a notice that this feature requires a CASA security assessment to keep the Gmail scope.
What CASA actually requires
Google classifies any scope that reads email content — gmail.readonly included — as a restricted scope. Restricted scopes require an annual third-party security assessment (CASA AL1) through one of Google's approved vendors. I checked the official restricted scopes list directly rather than going on assumptions, and there's no lighter-tier Gmail scope that avoids this. Reading email content, even read-only, triggers the same requirement as full inbox modification.
The assessment itself: $540/year minimum, 2–6 weeks turnaround, required again every year for as long as the app requests that scope.
Why I didn't try to work around it
My first instinct was to look for a narrower scope that might dodge the classification. Some discussion online suggested gmail.modify might land in a lighter "sensitive" tier rather than "restricted." I checked that claim against Google's own documentation before acting on it — and it was wrong. gmail.modify is on the restricted list too. There's no scope-switching trick. I'd rather find that out from the source than from a failed app review three weeks before launch.
The actual decision
JobTrackker is solo-founder, pre-revenue, and built for the Indian job market specifically. A recurring $540+/year cost and a 2-6 week review cycle, repeated annually, isn't a reasonable price to pay for a feature on a product that hasn't shipped publicly yet. So I cut it: reduced the Google OAuth scope down to sign-in only (openid/email/profile), which needs no CASA assessment at all, and removed the Gmail sync UI entirely.
This also meant rewriting how I talk about the product. Gmail sync had been the headline differentiator in every pitch I'd written. Without it, JobTrackker leans on two things instead: depth for the Indian job market specifically — LPA salary formatting, Naukri alert parsing, autofill for ATS platforms like Darwinbox and Keka — and the bundled AI workflow (Apply Kit) that handles cover letters, resume tailoring, and interview prep in one click instead of five separate tools.
Not gone, just deferred
Gmail sync isn't dead, it's just not a pre-launch gate anymore. The plan is to revisit it once JobTrackker has actual paying users — say, 100+ — at which point $540-720/year is a rounding error against revenue rather than a tax on launching at all. At that point it comes back as a Pro-tier retention feature, not the thing you need before you can even try the product.
Sometimes the right move on a feature isn't to fight to keep it. It's to check the actual cost against where the product actually is, and cut cleanly when the math doesn't work yet.