The user logs into his Gmail account on his own and uses the GMass extension, which operates within the Gmail UI, to create/schedule campaigns. On the back-end, GMass connects to the user's account over standard Google OAuth 2 to then send the emails.