privacy & data: where your bookmarks live
Where xmark stores your data, who can see it, what we do with embeddings, and how to delete everything.
steps
your bookmarks are yours
xmark stores your bookmarks in Supabase Postgres with row-level security (RLS). Every query is scoped to your user ID. Other users — and our service role itself, except for explicit admin operations — cannot read your data.
embeddings stay with us
We embed your bookmark text with OpenAI's text-embedding-3-small. The embedding API call is stateless: OpenAI receives the text, returns the vector, and (per their API policy) does not train on it. The vectors are stored in your row, alongside the bookmark.
chat answers stay with us
Chat uses Claude (Anthropic). The conversation history is stored in your account so you can come back to it. Same RLS — only you see your conversations. We don't share or sell prompts, answers, or bookmarks.
deletion is fast and complete
Settings → Danger zone → Delete account. We hard-delete credentials (X OAuth tokens, API keys, webhook secrets) immediately, soft-delete the profile (so the account ID stays unique), and purge data on a scheduled job. /data-deletion has the formal policy.
If you want xmark to forget without deleting your account — disconnect X. The OAuth token is hard-deleted on disconnect; subsequent syncs return zero.
ready to get started?
sign up in seconds. free to start, no credit card required.