They will almost certainly use oauth to access your email account.

They get given a key to act on your behalf they would never get your actual login details.