How we handle your data
What we store
bookmark++ only holds what it needs to answer questions about the things you save:
- Your account email, and, if you sign in with Google, the name and profile image Google returns.
- The URLs you save, and the content fetched from them: titles, captions, author handles, post statistics, article text, video transcripts, per-slide OCR, and the images or thumbnails needed to show the item back to you.
- What you import or sync from a connected account or an export file: the link to each saved item, the date you saved it, and, where the platform provides it, the post text and author. See Connected accounts for exactly what each platform gives us.
- What the model produced from that content: summaries, key points, tags, entities, the category it was filed under, and a numeric embedding used for search.
- Connection tokens for accounts you connect, stored encrypted, used only to read your saved items on your behalf.
- Usage counters: how many saves and questions you used this month, and what those operations cost us.
We do not store payment card details. We do not run advertising or third-party analytics trackers on the app.
Connected accounts
You can connect accounts so bookmark++ keeps your saved items in sync automatically. Every connection is authorised by you through the platform's own login screen (OAuth). We never see your password, and we never post, like, follow, message, or change anything on your behalf. We read your saved items and nothing else.
| Platform | What we read | How | Available to |
|---|---|---|---|
| X | Your bookmarks: post text, author, media references, the date bookmarked. Bookmark folders if you use them. | Official X API, checked every few minutes while connected. | Everyone |
| Your saved items: the link and the date saved. LinkedIn does not provide the post text through this API; we fetch the link the same way we fetch any URL you paste. | LinkedIn Member Data Portability API, checked about hourly while connected. | Members located in the EU, EEA and Switzerland, as determined by LinkedIn | |
| TikTok | Your favourite videos: the link and the date favourited. The export TikTok sends contains other categories; we keep only the favourites list and delete the rest as soon as it is received. | TikTok Data Portability API, as periodic exports while connected. | Users located in the EEA and UK, as determined by TikTok |
| Your saved posts: the link, the author handle, the date saved, and the collection name. | Instagram has no API for saved posts. You download your information from Instagram and upload the file to us. Nothing is connected. | Everyone |
Where a platform sync is not available for your account, you can upload the platform's own data export instead. The data we keep from an export is the same as from a sync: the link, the date, and whatever text the file contains.
Disconnecting. You can disconnect any account from Settings at any time. Syncing stops immediately and the connection token is deleted. You choose whether to keep the items already imported or delete them too. Revoking access from the platform's side has the same effect the next time we try to sync.
What we do with it
Your library is used to run the product for you: to fetch and understand what you save, to search it, and to answer your questions with citations back to your own items. Answers are generated from your library only.
We do not sell your data, and we do not share it with anyone except the processors listed below.
We do not train models on your content. Not our own, not anyone else's. Content received from a connected platform is used only to build your personal library and is never used to train, fine-tune, or evaluate a machine-learning model, aggregated with other users' data, or redistributed.
Who processes it
Running the product means handing pieces of your data to a small set of vendors, each for one job:
- Convex: hosts the database, file storage and backend that the app runs on.
- Cloudflare: serves this site and the app, and sits in front of our traffic.
- OpenRouter: routes content to the language models that summarise, read and answer. Requests are sent with training disabled.
- Jina AI: turns your items and questions into the embeddings that power search.
- ScrapeCreators: fetches public posts from social platforms when you save a link.
- Resend: sends the sign-in codes to your email address.
- Google: only if you choose to sign in with Google.
- X, LinkedIn, TikTok: only if you connect that account. They send us your saved items; we send them nothing but the request.
- Polar: handles payments and subscriptions as merchant of record, once paid plans open.
Some of these vendors operate outside the EEA. Where personal data leaves the EEA or UK we rely on the vendor's standard contractual clauses.
Retention & deletion
| What | Kept until |
|---|---|
| Saved items, media, summaries, embeddings | You delete the item, the source, or your account. |
| Connection tokens | You disconnect the account, or the platform revokes access. Deleted immediately. |
| Items from a disconnected account | Your choice at disconnect: keep, or delete everything from that source. |
| Content removed on the platform | When a platform tells us a post was deleted or made private, we remove our copy within 24 hours. |
| Unused export categories (TikTok) | Deleted on receipt. Only the favourites list is retained. |
| Usage counters | Rolling 12 months, for billing and abuse prevention. |
| Account | You delete it. Everything above goes with it. Backups age out within 30 days. |
Deleting an item removes its stored media, text, and embedding. Deleting your account removes every item, every connection, and your email. Both are self-serve from inside the app, and both can also be requested by email.
Your rights
Wherever you are, you can:
- Get a copy of everything we hold on you. Use Export my data in Settings, which produces a JSON file of your library and account, or email us.
- Delete any item, any connected source, or your whole account, from Settings, or by email.
- Withdraw consent for any connected account by disconnecting it. Prior processing stays lawful; future processing stops.
- Correct your account email by contacting us.
- Object or restrict processing where the law gives you that right.
Email privacy@bookmarkpp.com from the address you signed up with. We answer within 30 days, usually within a few days. If you are in the EEA or UK and think we have handled your data unlawfully, you can also complain to your local data protection authority. We would appreciate the chance to fix it first.
Who we are
The data controller for bookmark++ is LEGAL ENTITY NAME, REGISTERED ADDRESS, COUNTRY.
Privacy questions and requests: privacy@bookmarkpp.com. Everything else: support@bookmarkpp.com.
bookmark++ is for people aged 16 and over. We do not knowingly collect data from anyone younger; tell us and we will delete it.
Rules for using bookmark++
The short version
bookmark++ is a personal tool for keeping and searching the things you save. Use it for yourself, stay inside the quotas, do not use it to abuse other people or the platforms it reads from, and understand that it is young software offered as-is. Using the service means you accept what follows.
Your account
One account is for one person. You are responsible for what happens under it and for keeping access to the email address it is tied to. You need to be old enough to enter a contract where you live.
Personal use, and fair use
Plans come with monthly quotas, saves and questions, shown on the pricing page and inside the app. When a quota runs out, that operation pauses until the counter resets on the 1st or you move to a larger plan. A historical import from a connected account counts against your saves quota; the app tells you the number before it runs.
Quotas are set for a person using the product normally. Automated bulk saving outside the built-in connectors, reselling access, sharing one account across a group, or otherwise working around the meters is outside fair use, and we may throttle or close accounts that do it.
Connecting accounts
When you connect X, LinkedIn or TikTok, you authorise bookmark++ to read your saved items from that platform on your behalf, using the access the platform grants through its own consent screen. You can revoke that at any time from Settings or from the platform.
Your use of a connected platform remains subject to that platform's own terms. We use only the platform's official interfaces, and we will not read anything the platform has not authorised. If a platform withdraws or changes the access it offers, that connector may stop working; we will tell you, and your imported items stay in your library.
You may only connect accounts that belong to you.
Your content
What you save stays yours. You give us only the permission needed to run the service on it: fetching it, storing it, processing it through the vendors listed under Who processes it, and showing it back to you.
You are responsible for having the right to save what you save, and for respecting the terms of the sites it comes from. Do not use bookmark++ to collect content about people who have not consented, or to build a dataset for redistribution.
No abuse
Do not use the service to break the law, to harass anyone, to store or distribute illegal material, to attack our infrastructure or anyone else's, or to attempt to reach data belonging to other users. We may suspend an account immediately for any of these.
Answers are generated
Summaries, categories and answers come from language models reading your saved content. They are useful, and they are sometimes wrong. Check anything that matters against the original item, which every answer links back to. Do not rely on bookmark++ for medical, legal, or financial decisions.
Payment
Paid plans, when they open, are billed through Polar as merchant of record and renew until cancelled. Cancelling stops the next renewal and keeps your plan until the end of the period you paid for. Prices can change with notice ahead of a renewal.
As-is, and ending things
The service is provided as-is, without warranties of any kind. We do not promise it will be available without interruption, that every source or connector will keep working, or that nothing will be lost. Keep your own copy of anything you cannot afford to lose; Export my data exists for that. To the extent the law allows, our liability is limited to what you paid us in the previous twelve months.
You can stop at any time by deleting your account from Settings. We can end an account for a breach of these terms, or discontinue the service with reasonable notice.
Anything about these terms: support@bookmarkpp.com.