LQT for IT Administrators

One page covering exactly what LQT requests, why, and how to allow it. Last updated 21 July 2026.

What LQT is

LQT (Lead Quote Track) is quote-management software used by freight and logistics sales and procurement teams. A member of your organization is asking to connect their company Gmail or Outlook mailbox so LQT can send quote-request emails on their behalf and track suppliers' replies.

What LQT requests — and why

Provider	Scope requested	Plain English
Google	gmail.send	Send email as this user. Cannot read, search, or list any email.
	userinfo.email	Confirm which address just connected.
Microsoft	Mail.Send	Send email as this user via Graph API. Cannot read mail.
	User.Read	Basic profile (name, email) — standard sign-in scope.
	offline_access	Keep sending without asking the user to re-login every hour.

What LQT does not request

Cannot read, search, or export mailbox contents

No calendar access

No contacts / directory access

No admin / tenant-wide permissions of any kind

No file storage (Drive / OneDrive / SharePoint) access

No access continues after the user disconnects — revocable anytime

Application identifiers

Use these to identify the exact app on the consent screen and in your admin console.

Google OAuth Client ID422335030336-re4odj2qmp6q4ptd6b93ic6g80dml0rm.apps.googleusercontent.com

Microsoft Application (client) IDe2f472b0-1562-4c45-a6fb-4b2a84c010bb

Redirect URIshttps://hrohupqwuggsouvpqfhr.supabase.co/functions/v1/gmail-oauth-callback
https://hrohupqwuggsouvpqfhr.supabase.co/functions/v1/outlook-oauth-callback

How to allow it — Google Workspace

Admin Console → Security → API Controls → App access control.
Add the app by OAuth Client ID (above) and mark it Trusted.
Optionally scope this to a specific Organizational Unit (e.g. Sales, Procurement) rather than the whole domain.

How to allow it — Microsoft 365

Entra admin center (or Azure Portal) → Enterprise Applications.
Find or add the application using the Application (client) ID above.
Grant tenant-wide admin consent for the listed permissions, or approve per-user as each employee connects.

Network access — allow-listing & SSL inspection

LQT is a web app served over HTTPS. On networks that filter or inspect web traffic (e.g. FortiGate/ FortiGuard, Cisco Umbrella, Zscaler, Palo Alto), a brand-new domain can be blocked as "uncategorized / newly registered," or SSL deep-inspection can break the app as it loads. To allow it:

1. Allow these domains (web / URL filter)

leadquotetrack.com
www.leadquotetrack.com (and *.leadquotetrack.com)
hrohupqwuggsouvpqfhr.supabase.co — app backend (database, sign-in, storage); required

If your filter categorizes sites, allow LQT as Business / Information Technology.

2. Exempt those domains from SSL / deep inspection

When an inspection appliance re-signs the TLS connection, parts of the app fail to load. Adding the domains above to the SSL-inspection bypass list resolves it. (The site uses a valid Let's Encrypt certificate; a re-signed cert from the inspection appliance is what triggers "not secure" warnings.)

3. Sign-in / send hosts (only if using Google or Microsoft)

accounts.google.com · oauth2.googleapis.com · gmail.googleapis.com · login.microsoftonline.com · graph.microsoft.com

Vendor & compliance summary

Send-only email scopes — no inbox read access

TLS in transit, encryption at rest (Supabase/Postgres)

Per-company data isolation enforced at the database layer

Self-service data export & deletion (GDPR/CCPA rights)

Google / Microsoft publisher verification: in progress

SOC 2 / ISO 27001 (own certification): not yet — infrastructure provider Supabase is SOC 2 Type II audited

Full detail: Security & Trust page · Privacy Policy · Terms of Service

Contact

Security questions, a signed DPA, or anything else your review needs: support@leadquotetrack.com