Review the OAuth scopes Scribe requests when syncing teammates from Zoho Mail and installing signatures in Zoho Mail, and the data we store from each one.
Here are the scopes we request when you connect Zoho Mail to Scribe. Teammates and signatures are two separate integrations, each with its own consent, so you only grant what you use. Each scope is necessary for a specific function within the product.
This scope lets Scribe read the account of the admin who connects Zoho Mail: their role, to check that they are an admin of the organization, their email address, and the organization’s ID.
These scopes let Scribe add a teammate’s signature, update it when you publish a change, and remove it.
ZohoMail.organization.accounts.CREATE
ZohoMail.organization.accounts.UPDATE
ZohoMail.organization.accounts.DELETE
Zoho Mail has no permission for signatures alone. Signatures are part of Zoho’s organization accounts API, so Zoho’s consent screen asks you to let Scribe create, update and delete your organization’s accounts. Scribe uses these scopes only to add, update and remove signatures: it never creates, edits or deletes a user, and never changes a password or a role.