Legal
Privacy Policy
Summary
All My Do is a personal task inbox. You connect third-party accounts with OAuth. We store what we need to sync your tasks into your private inbox and to write back when you confirm. We do not sell your personal data.
Who this covers
This policy applies to visitors of allmydo.com and users of the All My Do app (app.allmydo.com and related environments).
Data we process
- Account data — identifiers from your sign-in provider (for example Microsoft or Google), such as email and display name.
- Connection metadata — which providers you connected, account labels, and sync settings you choose.
- OAuth tokens — access and refresh tokens for connected sources, stored encrypted (application-level protection / vaulting) so we can sync on your behalf.
- Task content — titles, statuses, due dates, and related fields mirrored from sources you authorize, plus content you create in All My Do.
- Usage & diagnostics — optional product analytics and application logs needed to operate and secure the service (when enabled).
How we use data
- Provide and improve the inbox, sync, and write-back features.
- Authenticate you and secure your account.
- Respond to support requests you send us.
- Comply with law and protect against abuse or security incidents.
Write-back to a connected source happens only when you take an explicit action in the product (for example edit, complete, or create).
Third parties
When you connect a source (for example Jira, GitHub, Google, or Microsoft), that provider’s own privacy terms also apply. We request only the OAuth scopes needed for the features we provide. Hosting and infrastructure providers that process data on our behalf (for example cloud hosting) are bound by our instructions and appropriate agreements.
Retention
We retain account, connection, and task data while your account is active. You may disconnect a source or request deletion of your All My Do account data by contacting us. OAuth tokens are removed when you disconnect a connection. Backups and logs may persist for a limited period for security and continuity.
Security
We use industry-standard practices appropriate to our stage of product, including encrypted transport (HTTPS), encrypted storage of secrets where applicable, and least-privilege access to production systems. See also our Security overview.
Your choices
- Disconnect any integration at any time in Connections.
- Reauthorize or revoke access in the provider’s security settings.
- Contact us to request access, correction, or deletion of personal data we hold about you, subject to legal limits.
Children
All My Do is intended for workplace and professional use. We do not knowingly collect personal data from children under 16.
Changes
We may update this policy as the product evolves. We will revise the “Last updated” date above and, for material changes, provide additional notice in the product or by email when appropriate.
Contact
Privacy questions: support@allmydo.com · Contact page · OWCER LLC.