Privacy Policy & Data Security

1. Our Privacy Philosophy

At Gidto (gidto.com), your productivity data is strictly yours. We do not sell your data, track your browsing habits, inject tracking cookies, or monetize your research. Our business model is purely subscription-based ($4.9/month or $39/year).

2. Information We Collect

• Guest Mode: Zero personal data is transmitted to our servers. Tab links and notes are saved exclusively in your browser's local storage.
• Authenticated Users (Google OAuth): When you sign in, we receive your name, email address, profile picture URL, and a unique identifier from Google to authenticate your session.
• Workspace Data: The tab links, titles, project tags, Kanban cards, Notes Studio content, and media review assets you intentionally save.

3. Google Chrome Web Store & Limited Use Requirements

Gidto complies with the Google Chrome Web Store User Data Policy, including the Limited Use requirements:

• We do not allow humans to read user data unless affirmative agreement has been obtained for specific records, it is required for security/debugging, or it is required by law.
• We do not use or transfer user data to serve advertisements, including personalized, re-targeted, or interest-based ads.
• We do not sell, rent, trade, or transfer user data to data brokers or advertising networks under any circumstances.
• We do not use or transfer user data to determine creditworthiness or for lending purposes.

4. Chrome Extension Permissions Justifications

The Gidto Chrome extension requests permissions strictly needed to perform user-triggered actions:

• tabs: Used only to read title and URL of tabs you explicitly choose to save or restore. Gidto does not log your browsing history or record background requests.
• storage: Used to store your active project preference and local extension cache in chrome.storage.local.
• activeTab: Used to capture tab metadata upon clicking the extension popup.

5. Data Isolation & Security

All cloud-synchronized data is encrypted in transit using industry-standard TLS 1.3 and encrypted at rest using AES-256 block encryption. Database records are strictly partitioned and scoped by authenticated User ID to guarantee zero cross-account data leakage.

6. Notes Trash & 30-Day Purge Lifecycle

Archived notes in Notes Studio are kept safely in your workspace archive for 30 days before scheduled purge, ensuring you can recover accidentally deleted work. You may trigger permanent immediate deletion at any moment.

7. Your Rights & Data Portability (GDPR & CCPA)

Under GDPR, CCPA, and global privacy standards, you have the right to inspect, download, or permanently purge your data. Gidto includes direct one-click data export tools in your Settings page allowing you to download all links as HTML Bookmarks or JSON format.