VerbatermBetaVerbaterm is in beta. You may encounter bugs, incomplete features, or unexpected results while we improve reliability.

Privacy policy

Todoist

Review these first

Score88.0
Reviewed
Policy typePrivacy policy
Concern findings3
Protections2
Source supportStrong

Source provenance

Verified official source
Retrieved
Last checked
PublishedAutomated refresh
Source URLhttps://doist.com/privacy

Canonical URL: https://www.todoist.com/privacy

What changedMaterial language shifts detected around personal data, privacy, share your, artificial intelligence. 90 new line(s), 88 removed line(s).

Snapshot hash 63907d74531d6144f88c7c41a2b8039e22e0391416bf9e5b2d5afdea6b467075

Snapshot of the source text at fetch time, not a live mirror of the policy page.

Plain-English summary

This privacy policy raises several concerns regarding the security and control of user data. Notably, there are no guarantees about the security or privacy of your information. If you are part of an organizational workspace, your organization, not Todoist, acts as the data controller, and its privacy policy dictates how your data is handled (risk_flags-2). Furthermore, third-party payment processors may use your payment information for their own purposes. Lastly, content created jointly in shared projects may be transferred to other collaborators if you delete your account or leave the project (risk_flags-4).

89% confidence

Ask Verbaterm

Follow up on findings with grounded answers from this review. Not legal advice.

Risk Flags

2 findings

Critical issues that users should be aware of, which may include significant privacy concerns, data security risks, or limitations on user rights.

high90% confidence

Third-Party Data Controller for Organizational Workspaces

If you join a Todoist for teams workspace related to an organization that is a Todoist customer, your organization will be the data controller of information in its workspace, and you should refer to its privacy policy.

Why it matters: Your organization, not Todoist, controls your data if you use a team workspace, and its privacy policy dictates how your data is handled.

If you join a Todoist for teams workspace relating to an organization that is a customer of Todoist (for example, when joining a Todoist for teams workspace that relates to your employer if that employer is a Todoist customer), we share Information about you with the organization and other users who belong to that organization. For example, we share your name and other basic account information. Your organization is the data controller of Information in its workspace; please see your organization's privacy policy for information about its privacy practices.

Who We Share Your Personal Information With, paragraph 1 · Citation strength: strong

medium90% confidence

Transfer of Content Ownership in Shared Projects

If you delete your account or leave a joint project, ownership of content you created jointly with collaborators will transfer to the remaining collaborators in that shared project.

Why it matters: If you leave a shared project or delete your account, content you co-created will become the sole property of other collaborators.

If you delete your account or leave a joint project, ownership of such content will transfer to the remaining collaborators in the shared project.

How Long We Store Your Information, paragraph 4 · Citation strength: strong

Data Use

1 finding

This section outlines how your data is collected, processed, and utilized, including details on data sharing practices and how you can manage your privacy settings.

low90% confidence

Processing and Storage of AI Prompt Information

The services use AI models where you can submit text, documents, and other materials as 'Prompts.' The information you provide in these Prompts may be collected and reproduced in the generated 'Outputs.' The AI models may also access various sources, including third-party and publicly available information, which may be combined with your Inputs to create Outputs.

Why it matters: Information you input into AI features, including text and documents, may be collected and used to generate responses. This information can also be combined with data from other sources.

Our Services include features enabled by artificial intelligence models that allow you to submit text (including voice-to-text), documents, and other materials to the Services. Your submitted materials may be combined with other instructions ("Prompts") to generate responses based on your Prompts ("Outputs"). We will collect any information you choose to provide in your Prompts and this information may be reproduced in the Outputs. The models we rely on from our AI Service Providers may access a variety of sources, including third-party sources, publicly available information from the Internet, and data we generate internally.

Information you provide to us, paragraph 11 · Citation strength: strong

Cancellation & Renewal

All clear

Details regarding the policies for canceling services, account deletion, and subscription renewal processes.

Looking good

No billing surprises spotted

Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.

Gotchas

All clear

Potentially overlooked clauses or practices that might be disadvantageous or surprising to users, including automatic renewals, data retention policies, or limitations on liability.

Looking good

No hidden gotchas

Verbaterm only flags concerns it can cite. Nothing easy-to-miss stood out in this section.

Protections

2 findings

This section highlights commitments and features designed to protect user rights, privacy, and security, such as data encryption, clear consent mechanisms, and user control over personal information.

Protection95% confidence

No Known Collection of Data from Children Under 13

The services are not aimed at children, and they state they do not knowingly collect information from children under 13.

Why it helps: This commitment helps protect the privacy of young children by stating that the service does not knowingly collect their information.

Our Services are not targeted at children, and we do not knowingly collect Information from children under the age of 13. If you learn that a child has provided us with Information in violation of this Policy, please contact us as indicated below.

Children, paragraph 1 · Citation strength: strong

Protection90% confidence

Permanent Deletion of Electronic Files Containing Information

When deleting information, measures will be taken to make it irrecoverable or irreproducible, and electronic files containing information will be permanently deleted.

Why it helps: This commitment ensures that when information is deleted, it is done so permanently and cannot be recovered, which enhances user privacy.

When deleting Information, we will take measures to make the Information irrecoverable or irreproducible, and electronic files which contain Information will be deleted permanently.

How Long We Store Your Information, paragraph 2 · Citation strength: strong

Report an issue

Flag a citation problem, stale policy text, or incorrect company match.

Verbaterm boundaries

This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.