What really happened is that we were scammed; that was the goal of the miniapp. A serious company uses its own domain and not Gmail as it is.