# ZeroMark · Security & Read-Only X Permissions > How ZeroMark protects your X account and bookmarks: read-only OAuth scopes, zero write permissions, encrypted tokens, no AI training, and one-click export. Canonical: https://www.zeromark.io/security Security & Permissions ## Read-only on X. Yours to export or delete anytime. Connecting years of saved bookmarks requires trust before it delivers value. Here is the exact contract of what ZeroMark can read, what it can never touch on your X account, and how your data is protected. ### 1. Strictly read-only X OAuth scopes When you click **Continue with X**, your browser goes to X's official OAuth 2.0 authorization screen. ZeroMark requests read-only access to pull the bookmarks you saved so our agents can summarize and sort them for your queue. Capability · Allowed? · Why Read your saved X bookmarks · **Yes (Read-only)** · Required to build your Browse queue, summaries, Map, and Chat citations Read your X handle & profile · **Yes (Read-only)** · Shows which @handle is connected before you confirm sign-in Post, reply, repost, or quote on X · **Never** · Zero write scopes requested; ZeroMark cannot publish to your feed Follow, unfollow, or block accounts · **Never** · Your social graph is never modified Read or send Direct Messages · **Never** · Private messages on X are never requested or accessed Delete bookmarks on X itself · **Never** · Triage decisions happen inside ZeroMark; your X account stays untouched ### 2. Token encryption and infrastructure security - **Encrypted OAuth tokens at rest:** Your X access and refresh tokens are encrypted with authenticated symmetric encryption before they touch our database. - **Managed cloud infrastructure:** All application traffic runs over HTTPS/TLS, and the database is isolated inside an access-controlled private network reachable only by the application server. - **Signed HttpOnly sessions:** Browser sessions use signed, HttpOnly, SameSite cookies. We do not load third-party ad trackers or cross-site behavioral pixels. - **Payments by [Stripe](https://stripe.com/privacy):** Card numbers and billing credentials are entered on [Stripe](https://stripe.com/privacy)'s hosted checkout and never pass through ZeroMark servers. ### 3. No AI model training on your library Your bookmarks, the notes you write in Living Memory, and the questions you ask in Chat are processed through a third-party AI provider strictly to generate your summaries, topic fields, cited answers, and podcast episodes. Processing runs on commercial API terms where your data is never used to train foundation models. ### 4. Full data ownership, export, and one-click disconnect We built ZeroMark so you can leave whenever you want with more clarity than when you arrived: - **One-click export:** Export your kept bookmarks, summaries, and Living Memory notes to Notion, Obsidian Markdown, or a local file at any time. - **Instant disconnect:** Disconnect your X account in Settings or revoke access from X's security settings in seconds. - **Account & operator transparency:** ZeroMark is operated by **Tellurave LLC**. See our [Privacy Policy](https://www.zeromark.io/privacy), [Terms](https://www.zeromark.io/terms), and [30-Day Refund Policy](https://www.zeromark.io/refunds). ### What early users noticed "The podcast feature is a huge value-add for passive consumption. Turning a month of saved X posts into an audio brief makes the backlog useful on a walk." @PinnacleCrypt · Early user on the Podcast tab "The Map visualization and podcast generation are the two things that separate this from asking a generic chatbot to summarize links." @Obikhay · Early user on Map & Podcast "One-key decisions (D for done, S to snooze, X to let go) with a two-line summary above every post is the first time my bookmark count actually went down." @ArticulateSam · Early user on Browse triage "Read-only on X and one-click export to Notion and Obsidian meant I could test it on my real library without worrying about lock-in." @Iam_riorochi · Early user on Security & Export [Start free →](https://www.zeromark.io/trial) Free for your latest 50 saves. [**$4.99 a month**](https://www.zeromark.io/pricing), or [**$39 a year**](https://www.zeromark.io/pricing), reads them all. [Pricing](https://www.zeromark.io/pricing) · [FAQ](https://www.zeromark.io/faq) · [Privacy](https://www.zeromark.io/privacy). ### Questions people ask #### Can ZeroMark post, like, follow, message, or delete bookmarks on my X account? No. ZeroMark requests strictly read-only OAuth 2.0 scopes on X. It can read your bookmarks, your likes (when you choose to compare them in Mirror), and your basic profile handle so you know which account is connected. It has zero write permissions: it cannot publish posts, send direct messages, follow or unfollow accounts, or delete bookmarks on X. #### Does ZeroMark ever see my X or Google password? Never. Sign-in uses official OAuth 2.0 with PKCE on X and standard OAuth on Google, or a passwordless email link. You authorize on X's own domain, and ZeroMark receives only a revocable read-only token, which is encrypted at rest before being stored. #### Are my bookmarks or notes used to train AI models? No. Classification, two-line summaries, cited Chat answers, and podcast scripts run through a third-party AI provider on commercial API terms where customer content is never used to train models. #### How do I revoke access or delete all of my data? You can disconnect X in one click from Settings inside the app, or revoke ZeroMark directly from your X account's Connected Apps page at any time. If you want your entire ZeroMark account and every synced save, note, and token permanently wiped, email [hello@mail.zeromark.io](mailto:hello@mail.zeromark.io). and we delete everything tied to your account. #### Is my library locked into ZeroMark? No. Every save you mark Done and every note you write in Living Memory can be exported in one click to Notion, Obsidian (clean Markdown files), or a portable file download, on both the free plan and paid plans.