Privacy & permissions

What Bagel accesses, stores, and never reads

Bagel uses X OAuth to log activity metadata. Here’s exactly what that means.

Does Bagel read your DMs?

No. Bagel logs that a DM happened — who sent it, when, and the direction (inbound or outbound) — so it counts toward your warm score. We never request, read, or store message content.

METADATA ONLY · ZERO CONTENT ACCESS
X OAuth scopes

What Bagel requests via X OAuth

SCOPEWHAT IT DOES
tweet.readRead tweets
To log when contacts like, reply to, or bookmark your posts
users.readRead user profiles
To match contacts by X username
dm.readRead DM metadata
To log DM events (who, when, direction). Content is never read.
like.readRead likes
To log when contacts like your posts
bookmark.readRead bookmarks
To log when contacts bookmark your posts
What we store

Data Bagel keeps

✓
Notes you write
Private notes on contacts, stored in our database.
✓
Pipeline data
Which stage each contact is in, when they moved.
✓
Activity metadata
Who, when, what type (liked_post, replied, dm_sent, bookmarked, etc.).
✓
Tags
Tags you create and assign to contacts.
✓
Task data
Follow-up tasks you create or that triggers generate.
What we never store

Data Bagel never touches

✕
DM content
Never requested, never read, never stored.
✕
Post/tweet content
We log that activity happened, not what was said.
✕
Media files
No images, videos, or attachments.
✕
Follower/following lists
Not requested via API.
✕
X API tokens
Managed by Clerk (our auth provider), never in our database.
Infrastructure

Where your data lives

DATABASE
AWS RDS (PostgreSQL), encrypted at rest and in transit
AUTHENTICATION
Clerk (third-party auth provider)
X TOKENS
Managed by Clerk’s social connection — never stored in Bagel’s database
INFRASTRUCTURE
AWS EKS in us-east-1
Control

How to revoke access

  1. Go to X Settings → Security and account access → Apps and sessions → Connected apps
  2. Find “Bagel” and click Revoke access
  3. This immediately disconnects Bagel from your X account
Or: contact hello@usebagel.com and we’ll help.
For the full legal privacy policy, see our Privacy Policy.
Common questions

Frequently asked

Is my data shared with third parties?+
No. Your data is not sold or shared. It’s used only to power Bagel features for your account.
Can I delete my data?+
Yes. Contact hello@usebagel.com and we’ll delete your account and all associated data.
Does Bagel work without X OAuth?+
No — Bagel needs X OAuth to sync activity. Without it, you can still add notes and manage pipeline stages manually, but auto-logging won’t work.

Ready to try Bagel?

Free to start
Learn more about BagelFull privacy policy
usebagel.com · Free to start

Give your X
a little memory.

Sign in with X. Set up your pipeline. Start remembering — so the relationship keeps going, even when you close the tab.