Privacy Policy
Last updated: November 13, 2026
This policy says what TodoHub knows about you, why, and what you can do about it. It is written to be read.
What we collect
- Account: your email address, your name and, if you add one, your photo. If you sign in with Google we receive your name, email and photo address from Google, and nothing else. We do not keep Google access tokens.
- Your content: workspaces, projects, tasks, comments and files that you and the AI apps you connect add.
- Settings: language, theme, table layout and similar choices.
- Technical data: the IP address and browser details that every web request carries, kept in server logs for a short time to keep the service safe and working.
- Analytics, only with your consent: on the home page and the sign-in page, Google Analytics counts visits. Inside the app there is no analytics.
We do not sell your data and we do not show ads.
Why we use it
- to run the service: show your tasks to you and to the people in your workspace, and let the AI apps you connect work with them;
- to sign you in and to send the emails the service needs (sign-in codes and invitations);
- to keep the service secure and find faults;
- with your consent, to understand how many people visit the public pages.
The legal grounds are the contract with you (running the service), our legitimate interest (security) and your consent (analytics).
Who else sees it
- People in your workspace see the tasks, comments and files of the projects they have access to, and your name and photo.
- AI apps you connect read and change tasks with your rights, through the TodoHub MCP server. What they do with the data afterwards is governed by their own terms.
- Service providers that process data for us: hosting, email delivery (Resend), Google (sign-in, and analytics if you consent).
We may disclose data when the law requires it.
Cookies
TodoHub uses a session cookie to keep you signed in and remembers your theme and cookie choice in your browser. These are necessary and need no consent. Analytics cookies are set only if you allow them. You can change your choice at any time on the Cookie Settings page.
How long we keep it
Your data is kept while your account exists. When you delete your account, your account and sign-in data are removed and you leave every workspace; a workspace where you were the only person is deleted with you. Tasks and comments you wrote in workspaces shared with others stay for those people. Server logs are kept for a short time. Backups are overwritten on their regular schedule.
Your rights
You can see and correct your data in Settings, read your tasks out through a connected AI app, and delete your account in Settings. You may also ask us for a copy of your data, object to its use, or withdraw consent for analytics. Write to [email protected]. If you believe we handle your data wrongly, you may complain to the data protection authority of your country.
Security
Connections are encrypted. Access to data is limited by workspace and role. No system is perfectly safe; if something happens that affects your data, we will tell you.
Children
TodoHub is not for people under 16.
Changes
When this policy changes we update the date above; if the change is significant we will tell you in the app or by email.
Contact
Questions about privacy: [email protected]