todoerTODOER / PRIVACY
Privacy
Draft · 27 October 2026
Who is responsible?
Merola Software & Services, Wartauweg 19, 8049 Zurich, Switzerland, operates Todoer and is responsible for personal data it processes in connection with the hosted service. For privacy requests, email [email protected] or write to the postal address above.
What information does Todoer process?
Depending on the features you use, Todoer processes account and authentication information such as your email address, display name, credentials or authentication identifiers; work you enter such as tasks, descriptions, comments, schedules, files and sharing settings; and technical information needed to operate and protect the service, such as session and access records.
If you use Google sign-in, Google authenticates you and provides identity information to Todoer. If you invite or share with others, Todoer processes the information needed to manage access. Please obtain any required permission before adding someone else’s personal information.
Why is information used?
We use information to provide accounts and the features you request, store and synchronize your work, manage sharing and access, deliver notifications you enable, secure and maintain the service, respond to requests, and meet applicable legal obligations.
AI assistance and connected agents
Optional built-in assistance, when enabled and requested, sends the submitted brief or capture text to an external AI provider through OpenRouter. Destination suggestions may also send a limited set of eligible list identifiers and titles. Drafts and suggestions require user review as described in the assistance documentation. Provider settings do not guarantee that every provider retains no data.
If you connect an external agent, the client and its provider may receive the information you authorize it to access. Their own privacy practices apply. Do not connect a service or submit information you do not want that service to process.
Cookies and device storage
The app uses session cookies and browser storage to support sign-in, security, drafts, and offline features. Offline capture can keep pending task text on your device until it is synchronized. Clearing browser storage may remove locally stored unsynchronized information. The public website itself does not set application cookies in its static files; hosting infrastructure may process technical request data.
Who may receive information?
Information may be shared with people you authorize, identity providers such as Google when you choose their sign-in, AI providers when you invoke configured assistance, and service providers used for hosting, storage, email, and delivery. External clients you authorize can access information within their granted permissions. Provider locations and international transfers depend on the production configuration and must be confirmed before launch.
Retention and deletion
We keep data for as long as needed to provide the service, maintain security and recovery, and meet applicable obligations. Deleting an item in the app can hide it without immediately erasing all underlying records: the rebuild retains some history, deleted attachment bytes, and backups. Retention periods and permanent deletion procedures depend on the production configuration and are not yet established.
Your rights
Subject to applicable law, you may request information about your personal data, correction, deletion, or restriction of processing, and exercise other applicable rights. Send your request to [email protected] or the postal address above. You may also contact the Swiss Federal Data Protection and Information Commissioner.
Security and changes
Todoer uses access controls and other measures intended to protect information, but no service can guarantee absolute security. We may update this notice as the service changes. This draft describes the documented rebuild and needs review against the actual deployed infrastructure before it is used as a production privacy notice.
Website fonts
This website loads Geist from Bunny Fonts. Your browser makes requests to fonts.bunny.net for the stylesheet and font files, which involves a network connection to that provider. Bunny Fonts states that its service does not track users or keep request logs. System fonts are used if the font files are unavailable.