skip to content
xmarkVol. MMXXVI
docsblog
sign insign upjoin
guides
beginnertrust4 minutes

privacy & data: where your bookmarks live

Where xmark stores your data, who can see it, what we do with embeddings, and how to delete everything.

steps

1

your bookmarks are yours

xmark stores your bookmarks in Supabase Postgres with row-level security (RLS). Every query is scoped to your user ID. Other users — and our service role itself, except for explicit admin operations — cannot read your data.

2

embeddings stay with us

We embed your bookmark text with OpenAI's text-embedding-3-small. The embedding API call is stateless: OpenAI receives the text, returns the vector, and (per their API policy) does not train on it. The vectors are stored in your row, alongside the bookmark.

3

chat answers stay with us

Chat uses Claude (Anthropic). The conversation history is stored in your account so you can come back to it. Same RLS — only you see your conversations. We don't share or sell prompts, answers, or bookmarks.

4

deletion is fast and complete

Settings → Danger zone → Delete account. We hard-delete credentials (X OAuth tokens, API keys, webhook secrets) immediately, soft-delete the profile (so the account ID stays unique), and purge data on a scheduled job. /data-deletion has the formal policy.

If you want xmark to forget without deleting your account — disconnect X. The OAuth token is hard-deleted on disconnect; subsequent syncs return zero.

ready to get started?

sign up in seconds. free to start, no credit card required.

get started freesign in
xmark

built by jclvsh

support

email feedbacktwitter @jclvsh

legal

privacy policyterms of servicedata deletion

© 2026 xmark. all rights reserved.