Privacy

• Your account. Your email address, and your name and profile picture if you sign in with Google. Your timezone, so "today" means your today.
• Your tasks. Everything you or your agents put in: tasks, notes, dates, projects, contacts, and where a task came from (a source label, link and excerpt). We keep each task's history (status changes, edits, notes) alongside it.
• Workspaces. The workspaces you create or join, who is a member, and invitations you send or receive.
• Sign-in records. Your sessions, with the IP address and browser they came from, and the one-time codes we email you. We use these to keep you signed in and to stop abuse.
• Waitlist answers. If you request an invite: your email, and whatever you choose to tell us about your role, where commitments get lost, and what you'd want tracked.

Todo MCP is built for AI agents to read and write your tasks over MCP. An agent only gets in with an API key that you create in Settings. Each key:

• acts as you, and reaches only the workspaces you're a member of;
• is either read-only or read and write, as you chose when you made it;
• stops working the moment you revoke it.

What an agent does with your tasks after reading them is up to that agent and its provider (for example Anthropic or OpenAI). Their privacy terms apply to that, not ours. Tasks an agent creates are marked as coming from an agent, and usually land in Triage for you to accept or dismiss.

We store only a hash of each key, never the key itself. Todo MCP does not run AI models over your tasks and does not use your data to train models.

We use a sign-in cookie to keep you signed in. That's the only cookie we set without asking.

Product analytics only load if you click "Allow cookies". When they're on, we see which pages get visited and which buttons get clicked, so we know what's used. We set it up to see as little as possible:

• all text and attributes on the page are masked, so task titles never leave your browser;
• search terms and filters are stripped from every URL before it's sent;
• there is no session recording;
• signed in, you're identified by an internal user ID, not your email or name.

Change your answer any time from "Cookie settings" at the bottom of this page, or in Settings. Turning analytics off stops collection and resets the analytics ID.

We don't sell your data or share it with advertisers. We use a small number of service providers for hosting, the database, email delivery, bot protection and, if you allow it, analytics. They handle your data only to run Todo MCP for us. If you sign in with Google, Google handles that sign-in.

People in a shared workspace see that workspace's tasks and its member list. Your personal workspace is yours alone.

We keep your account and tasks while your account exists. Canceled and done tasks stay in your history until you ask us to delete them. Waitlist answers are kept until you're invited or ask us to remove them.

You can see and edit your tasks in the app at any time, and revoke agent keys in Settings. To get a copy of your data, correct something, or delete your account and everything in it, email support@gettodomcp.com. We'll do it within 30 days.

Todo MCP isn't meant for anyone under 16, and we don't knowingly collect their data.

When this page changes, we update the date at the top. If a change affects how your data is used in a meaningful way, we'll email you before it takes effect.