Todoist vs Dropbox
Side-by-side comparison of the Terms of Service and Privacy Policy of Todoist and Dropbox.
Todoist offers some meaningful privacy positives, including an explicit no-general-AI-training statement, disclosed deletion timing, and data access/portability rights. But these are offset by arbitration, broad content licensing, unilateral termination/service changes, extensive liability limits, auto-renewal, and broad data sharing including advertising/analytics and AI providers.
Todoist’s legal terms are fairly standard for a cloud productivity app: paid plans auto-renew, refunds are limited, liability is heavily capped, and most disputes go to individual arbitration unless you opt out quickly. On privacy, Doist discloses broad data collection and sharing with vendors, analytics, ads, and AI providers, but also states it does not use user data to train generalized AI models and offers EEA/UK rights plus API-based access to much account data.
Points of interest
-
negative ●●●●○ termsBinding arbitration required
Most disputes must be resolved through individual arbitration, and you waive court access, jury trial, and class actions unless you opt out within 30 days. That can make it harder and less practical to pursue claims.
-
negative ●●●●○ termsBroad content license
You keep ownership of your content, but grant Doist a worldwide, irrevocable, royalty-free license to use, store, modify, and distribute it to operate the service. In shared spaces, other users may also get broad rights to interact with your content.
-
negative ●●●●○ termsCan terminate anytime
Doist can suspend or terminate your account or access at any time, for any reason or no reason, with or without notice. After termination, it has no obligation to keep or provide your stored content.
-
negative ●●●●○ termsStrong liability waivers
The service is provided as-is, with broad warranty disclaimers, and Doist’s liability is generally capped at what you paid in the prior 12 months or $100. This significantly limits your recovery if something goes wrong.
-
positive ●●●●○ privacyNo generalized AI training
Doist says it does not use your information, including AI-collected information, to train generalized or non-personalized AI or machine learning models. This is a meaningful privacy commitment compared with many AI-enabled services.
-
positive ●●●●○ privacyDeletion with backup timeline
The policy explains that after account deletion, information is removed from production systems and usually only encrypted backup copies remain for 90 days. That gives users a clearer expectation than vague retention language.
-
negative ●●●○○ termsAuto-renewal, limited refunds
Paid subscriptions renew automatically until canceled, and fees are generally non-refundable. Users need to cancel before renewal to avoid the next charge.
-
negative ●●●○○ termsData shared with AI vendors
If you use AI features, your prompts and related data may be sent to third-party AI providers, and outputs are not guaranteed to be accurate. Sensitive information entered into AI features may therefore reach outside vendors.
-
negative ●●●○○ privacyAdvertising and cross-service tracking
The privacy policy allows analytics and advertising cookies, and says third-party partners may collect information about your online activities over time and across different services. That goes beyond strictly necessary service operation.
-
positive ●●●○○ privacyAPI access and portability
EEA/UK users are told they can access data, and Doist says it provides full access to your information via its API, with portability rights also described. That can make exporting and moving data easier, though some categories are excluded.
-
neutral ●●○○○ privacyEmployer controls workspace data
If you use Todoist through an organizational workspace, your employer or organization may control, access, modify, or delete workspace content, and its privacy policy applies there. That is important context for workplace use rather than a consumer-facing promise.
Documents
Dropbox provides meaningful privacy rights, transparency reporting, data export and deletion tools, and a clear no-sale statement. But these benefits are offset by mandatory arbitration for many U.S. users, strict liability limits, auto-renewal, broad service-related content access/scanning rights, and substantial visibility for team admins and viewer analytics.
Dropbox’s legal terms are fairly standard for a cloud storage service: you keep ownership of your files, but Dropbox gets broad operational rights to host and scan them. It offers useful privacy controls like access, download, correction, deletion, and objection rights, and says it does not sell data to advertisers. Key tradeoffs include automatic subscription renewal, broad liability limits, U.S. arbitration for many users, admin access in team accounts, and collection of usage/device analytics.
Points of interest
-
negative ●●●●● termsMandatory individual arbitration
Most U.S. users must resolve disputes through individual arbitration unless they opt out within 30 days, and class actions are barred. This can make it harder to pursue claims collectively or in court.
-
positive ●●●●● privacyStrong data control tools
Users can access, correct, download, delete, and in some cases object to processing of their personal data through settings or by request. Dropbox also supports taking your data elsewhere in machine-readable format.
-
negative ●●●●○ privacyViewer analytics reveals identity
If you open shared content in features with analytics, the content owner may see your identity, device details, and how long and what parts you viewed. This can reduce anonymity when reviewing shared documents.
-
negative ●●●●○ termsTeam admins can access data
On Dropbox Team accounts, organization admins may access, disclose, restrict, remove information, or terminate your access. Even non-team users interacting with team content may have some information exposed to that organization.
-
negative ●●●●○ termsLiability capped very low
Dropbox broadly disclaims warranties and usually caps damages at the greater of $20 or the amount paid under the current plan. If something goes wrong, your financial recovery may be very limited.
-
positive ●●●●○ termsYou keep content ownership
Dropbox says your files remain yours and the terms do not transfer ownership. That is a strong baseline protection for users storing documents and media there.
-
positive ●●●●○ privacyNo sale to advertisers
Dropbox expressly says it does not sell your information to advertisers or other third parties. That is a meaningful privacy-positive commitment compared with many ad-supported services.
-
negative ●●●○○ termsBroad content access rights
To run features like previews, OCR, search, and sharing, Dropbox may access, store, and scan your content, and extend that permission to affiliates and trusted third parties. This is operationally common, but it means your files are not treated as inaccessible to Dropbox systems.
-
negative ●●●○○ privacyExtensive data collection
Dropbox collects account, file-related, contact, usage, device, cookie, and viewer analytics information. For a productivity service this may be expected, but users should know the service monitors substantial metadata and activity.
-
negative ●●●○○ termsAuto-renewal and limited refunds
Paid plans renew automatically until canceled, and refunds are generally only available where required by law. Users need to actively cancel to avoid future charges.
-
positive ●●●○○ privacyTransparency on government requests
Dropbox commits to government request principles and publishes a transparency report about law-enforcement requests. That gives users more visibility into official data access demands.
-
neutral ●●○○○ privacyDeletion starts after 30 days
After account deletion, Dropbox says it initiates deletion after 30 days, but backups and legal retention can delay full removal. This is fairly typical, though not immediate.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.