> ## Documentation Index
> Fetch the complete documentation index at: https://help.scribe-mail.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Scopes used from Zoho Mail

> Review the OAuth scopes Scribe requests when syncing teammates from Zoho Mail and installing signatures in Zoho Mail, and the data we store from each one.

Here are the scopes we request when you connect Zoho Mail to Scribe. Teammates and signatures are two separate integrations, each with its own consent, so you only grant what you use. Each scope is necessary for a specific function within the product.

## Sync your teammates

These scopes are read only. With them, Scribe changes nothing in your Zoho Mail organization.

### Check who connects Zoho Mail

This scope lets Scribe read the account of the admin who connects Zoho Mail: their role, to check that they are an admin of the organization, their email address, and the organization's ID.

* `ZohoMail.accounts.READ`

### Sync your teammates

This scope allows Scribe to read the users of your Zoho Mail organization, with their aliases and profile fields.

* `ZohoMail.organization.accounts.READ`

### Sync your groups

This scope allows Scribe to read your Zoho Mail groups and their members, so you can select teammates by group.

* `ZohoMail.organization.groups.READ`

### Sync your domains

This scope allows Scribe to read your domains and import them.

* `ZohoMail.organization.domains.READ`

## Install signatures

### Check who connects Zoho Mail

As for teammates, this scope lets Scribe check that the admin who connects Zoho Mail is an admin of the organization, and read the organization's ID.

* `ZohoMail.accounts.READ`

### Find each teammate's mailbox

This scope lets Scribe find the Zoho Mail user behind each teammate's address, and read the signatures Scribe installed for them.

* `ZohoMail.organization.accounts.READ`

### Add, update and remove signatures

These scopes let Scribe add a teammate's signature, update it when you publish a change, and remove it.

* `ZohoMail.organization.accounts.CREATE`
* `ZohoMail.organization.accounts.UPDATE`
* `ZohoMail.organization.accounts.DELETE`

<Warning>
  **Zoho Mail has no permission for signatures alone.** Signatures are part of Zoho's organization accounts API, so Zoho's consent screen asks you to let Scribe create, update and delete your organization's accounts. Scribe uses these scopes only to add, update and remove signatures: it never creates, edits or deletes a user, and never changes a password or a role.
</Warning>

You can learn more about what each scope gives access to in the [Zoho Mail API documentation](https://www.zoho.com/mail/help/api/).

## What data we store in Scribe

From the scopes listed above, here is the data we actually store in Scribe:

* First name
* Last name
* Email address and aliases
* Mobile phone
* Work phone
* Street address
* City
* State or province
* Zip or postal code
* Country or region
* Job position and department, when Zoho fills them
* Custom information values
* Group names and memberships
* Domains hostname
* For each installed signature, the ID Zoho Mail gives it
* The connection itself: your Zoho data center, your organization's ID and the authorization from your consent

> **Note:** Scribe can't read or send your emails, and doesn't store any profile picture from Zoho Mail. Scribe is [SOC 2 Type II compliant](/en/what-scribe-does-concerning-security).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.