Todoist offers some meaningful privacy positives, including an explicit no-general-AI-training statement, disclosed deletion timing, and data access/portability rights. But these are offset by arbitration, broad content licensing, unilateral termination/service changes, extensive liability limits, auto-renewal, and broad data sharing including advertising/analytics and AI providers.
Todoist’s legal terms are fairly standard for a cloud productivity app: paid plans auto-renew, refunds are limited, liability is heavily capped, and most disputes go to individual arbitration unless you opt out quickly. On privacy, Doist discloses broad data collection and sharing with vendors, analytics, ads, and AI providers, but also states it does not use user data to train generalized AI models and offers EEA/UK rights plus API-based access to much account data.
Points of interest
Most disputes must be resolved through individual arbitration, and you waive court access, jury trial, and class actions unless you opt out within 30 days. That can make it harder and less practical to pursue claims.
"disputes arising under these Terms will be resolved by binding, individual arbitration... waiving the right to a trial by jury or to participate in any class action"
You keep ownership of your content, but grant Doist a worldwide, irrevocable, royalty-free license to use, store, modify, and distribute it to operate the service. In shared spaces, other users may also get broad rights to interact with your content.
"you grant Doist a worldwide, non-exclusive, irrevocable, royalty-free, fully paid right and license... to use, host, store... reproduce, modify, display, distribute"
Doist can suspend or terminate your account or access at any time, for any reason or no reason, with or without notice. After termination, it has no obligation to keep or provide your stored content.
"Doist may, at its sole discretion... suspend or terminate your access to the Service, at any time for any reason or no reason, with or without notice"
The service is provided as-is, with broad warranty disclaimers, and Doist’s liability is generally capped at what you paid in the prior 12 months or $100. This significantly limits your recovery if something goes wrong.
"THE AGGREGATE LIABILITY OF THE DOIST ENTITIES... IS LIMITED TO THE GREATER OF: (A) THE AMOUNT YOU HAVE PAID... OR (B) $100"
Doist says it does not use your information, including AI-collected information, to train generalized or non-personalized AI or machine learning models. This is a meaningful privacy commitment compared with many AI-enabled services.
"we do not use information we collect from you, including via artificial intelligence tools, to develop, improve, or train generalized/non-personalized artificial intelligence"
The policy explains that after account deletion, information is removed from production systems and usually only encrypted backup copies remain for 90 days. That gives users a clearer expectation than vague retention language.
"upon deleting your account, all your Information will be removed from our production systems. Usually, only an encrypted copy... will remain on our backup archives for 90 days"
Paid subscriptions renew automatically until canceled, and fees are generally non-refundable. Users need to cancel before renewal to avoid the next charge.
"The subscription will continue unless and until you cancel your subscription... except as expressly provided by applicable law, are non-refundable"
The privacy policy allows analytics and advertising cookies, and says third-party partners may collect information about your online activities over time and across different services. That goes beyond strictly necessary service operation.
"third-party partners, such as analytics, advertising, and security partners, may also use these technologies to collect information about your online activities over time and across different services"
EEA/UK users are told they can access data, and Doist says it provides full access to your information via its API, with portability rights also described. That can make exporting and moving data easier, though some categories are excluded.
"We provide full access to your Information via our API... Portability. You have the right to receive a copy of Information"
If you use Todoist through an organizational workspace, your employer or organization may control, access, modify, or delete workspace content, and its privacy policy applies there. That is important context for workplace use rather than a consumer-facing promise.
"your organization's privacy policy applies... your organization is the data controller of Information in its workspace"
Other Productivity services on AIgree
Compare Todoist with…
The 7 clauses that actually matter, the red flags to watch for, in 5 minutes.
Report a problem with this summary
Spot something wrong, missing, or misleading? Tell us — we review every report.
Spot something wrong, missing, or misleading? Tell us — we review every report.
Thanks — your report was submitted and will be reviewed.
Documents
Terms of Service
source ↗- •You must be at least 13, provide accurate account information, keep your password secure, and follow all applicable laws when using Todoist.
- •Paid plans renew automatically until canceled, charges are authorized to your payment method, and fees are generally non-refundable except where law requires otherwise.
- •Doist may suspend or terminate accounts for unpaid charges, Terms violations, or any reason, and prepaid fees remain non-refundable unless stated otherwise.
- •You keep ownership of your content, but grant Doist and other authorized users licenses to use, store, share, modify, and display it.
- •Workspace administrators can manage users, permissions, and content, and organizations may own and control content in organizational workspaces.
- •If you use AI features, your inputs may be sent to third-party model providers, and you must independently verify outputs because accuracy is not guaranteed.
- •Doist may remove content, change the service or Terms, discontinue features, and is not obligated to provide support or keep your content after termination.
- •The service is provided as-is without warranties, and Doist limits liability for indirect damages and generally caps total liability at paid fees or $100.
- •You agree to indemnify Doist for third-party claims arising from your misuse, violations, unlawful content, or disputes involving your use of the service.
- •Most disputes must go to binding individual arbitration, not court or class actions, though you can opt out within 30 days and some exceptions apply.
Privacy Policy
source ↗- •Doist collects account details, payment information, device and usage data, location for reminders, user content, messages, AI prompts and outputs, contacts, and connected-app data.
- •If you use Todoist through your employer's team workspace, your organization controls workspace data and its privacy policy applies to that information.
- •Doist uses your information to provide the service, process payments, send support responses, improve features, analyze usage, prevent fraud, enforce policies, and send newsletters.
- •Doist says it does not use your information, including AI-collected information, to train generalized or non-personalized AI or machine learning models.
- •Doist uses essential, functional, analytics, and advertising cookies; blocking essential cookies may prevent service use, and non-essential cookies generally expire within two years.
- •Doist shares data with other users you collaborate with, your organization, cloud and support vendors, AI providers, analytics providers, integrations, email providers, payment processors, and authorities when required.
- •Your information may be processed and stored in the U.S. and other countries, using Standard Contractual Clauses or other lawful transfer mechanisms where required.
- •Doist keeps information as long as needed for stated purposes, usually deletes data after valid erasure requests, and may keep encrypted backups for 90 days.
- •You can manage sharing settings, unsubscribe from marketing emails, and, in shared projects, remaining collaborators keep ownership if you leave or delete your account.
- •EEA and UK users can request access, deletion, objection, portability, correction, restriction, and can complain to a supervisory authority or contact Doist or its EU representative.
