Skip to main content
When you connect Zoho Mail to Scribe, we sync your team’s information and install your teammates’ email signatures. Teammates and signatures are two separate integrations, each with its own consent. This page explains exactly which permissions we request and what data we store.

OAuth Scopes for teammates

Scribe requests the following read only scopes when syncing your teammates from Zoho Mail:
1

Check who connects Zoho Mail

ZohoMail.accounts.READThis scope allows Scribe to read the connecting admin’s own account: their role, their email address and the organization’s ID.
2

Sync your teammates

ZohoMail.organization.accounts.READThis scope allows Scribe to read the users of your Zoho Mail organization, with their aliases and profile fields.
3

Sync your groups

ZohoMail.organization.groups.READThis scope allows Scribe to read the groups you have created and their members.
4

Sync your domains

ZohoMail.organization.domains.READThis scope allows Scribe to read the domain names of your Zoho Mail organization.

OAuth Scopes for signatures

Scribe requests the following scopes when installing signatures in Zoho Mail:
1

Check who connects Zoho Mail

ZohoMail.accounts.READThis scope allows Scribe to check that the connecting admin is an admin of the organization, and to read the organization’s ID.
2

Find each teammate's mailbox

ZohoMail.organization.accounts.READThis scope allows Scribe to find the Zoho Mail user behind each teammate’s address and read the signatures Scribe installed for them.
3

Add, update and remove signatures

ZohoMail.organization.accounts.CREATE, ZohoMail.organization.accounts.UPDATE, ZohoMail.organization.accounts.DELETEThese scopes allow Scribe to add, update and remove your teammates’ signatures. Zoho Mail has no permission for signatures alone, so these scopes also cover managing user accounts. Scribe uses them only for signatures: it never creates, edits or deletes a user.
You can find detailed information about the scopes Scribe uses from Zoho Mail and in the Zoho Mail API documentation.

Data Stored in Scribe

From the scopes listed above, Scribe collects and stores the following fields: User profile data: first name, last name, and job position and department when Zoho fills them. Email addresses: each teammate’s address and, if you import them, their confirmed aliases. Phone numbers: mobile phone and work phone. Address: street address, city, state or province, zip or postal code, and country. Groups: group names and memberships. Domains: domain hostnames. Custom information: the values of the custom information fields you have created in Zoho Mail. Signatures: for each signature installed, the ID Zoho Mail gives it. Connection: your Zoho data center, your organization’s ID and the authorization from your consent.
Scribe cannot read or send your emails, and doesn’t store any profile picture from Zoho Mail. Scribe is SOC 2 Type II compliant.