Privacy Policy

Information we handle

• Account and team details: name, email address, role, workspace membership, profile image, and authentication information. Our authentication provider handles passwords and sessions; Gitterdone does not need to display your password to teammates.
• Work you add: tasks, subtasks, descriptions, projects, clients, goals, schedules, comments, links, files, screen recordings, transcripts, planning cards, and other workspace content.
• Activity: task and review history, time entries, completion and reward activity, notifications, and interactions such as recording views or reactions.
• Device and service data: session identifiers, browser-stored preferences, and technical request or error information needed to run, secure, and troubleshoot the app. Our hosting and authentication providers may also process IP address and browser information when you connect.
• Connected services: information you choose to connect or that an enabled workspace integration supplies, as described below.

How we use it

We use this information to sign you in; provide and sync workspace features; show work to the appropriate teammates; run calendars, notifications, reviews, rewards, and integrations; respond to requests; prevent misuse; and diagnose problems. Gitterdone is not an advertising product, and we do not use your workspace content for targeted advertising or sell it to data brokers.

Who can see workspace content

Gitterdone is collaborative. Content you add to a shared workspace may be visible to its authorized members, leads, and administrators according to the feature and their access. A workspace administrator may manage accounts, settings, and shared work. Personal preferences and some planning data are stored for your own view; do not assume every item is private simply because you created it.

Task attachments, files inserted inline in task text, and native Gitterdone recordings are stored privately. Gitterdone checks the signed-in account before issuing short-lived access links. Links that teammates add to external services remain subject to those services' sharing and access settings.

Connected services and AI

• Google Calendar: If you connect it, Gitterdone requests read-only calendar access and your Google account email. It uses calendar events to display your schedule and help log meeting time. You can see your event details; when a lead or administrator views your schedule, the app returns opaque “Busy” blocks instead of event titles, descriptions, links, locations, or attendees. Connection tokens are stored so the app can refresh access. You can disconnect in Settings. Google Calendar data is used for these calendar features, not advertising or general-purpose AI training.
• Slack and Fireflies: If configured for a workspace, Gitterdone may receive selected Slack events or Fireflies meeting action items, create task suggestions, and send task, review, reminder, or celebration messages to Slack. Content included in those exchanges is also subject to those services’ policies.
• Loom and GitHub: If used, Gitterdone may store Loom share links and display Loom content, or exchange issue and repository context with GitHub for connected task workflows.
• Beeby and transcription: If enabled, AI features may send relevant prompts, task or workspace context, comments, or repository context to Anthropic to produce suggestions or replies. Transcription may send a time-limited link to a private recording to Deepgram or Groq, and send transcript text to Anthropic for a summary. Review AI output before relying on it; avoid entering information you do not want processed by these providers.

Connecting a third-party service may also involve that service’s own collection and handling of information. Features without the needed connection or provider configuration may be unavailable.

Service providers and disclosures

Gitterdone uses Supabase for authentication, database, and file storage, and Vercel for hosting and operational logs. Depending on enabled features, the services named above may process the information needed for their function. We may also disclose information when required by law, to protect users and the service, or in connection with a business transfer subject to applicable requirements. We do not make a workspace's data public merely because the app is reachable on the web.

Storage, retention, and security

Account and workspace data is stored while needed to provide the service and may remain until a workspace administrator removes it. Deleting a task can first move it to trash rather than immediately erase it. Some records, files, backups, and operational logs may remain for a limited period after removal as needed for recovery, security, or legal obligations. Browser storage keeps sessions and some preferences on your device. We use access controls and other reasonable safeguards, but no internet service can guarantee absolute security.

Service providers may process information in locations outside your country. Their handling is also governed by their own terms and privacy notices.

Your choices and requests

You can update some profile and task information in the app, manage certain preferences, remove content you control, and disconnect Google Calendar in Settings. For access, correction, export, deletion, or questions about your account or workspace data, contact your workspace administrator or your usual Buena contact. We will handle applicable privacy-rights requests as required by law. Removing shared content or an account can affect other members’ work; some information may need to be retained for legitimate or legal reasons.

Children and changes

Gitterdone is intended for workplace use, not for children. We may update this policy as the app or its integrations change. The date at the top will show the latest revision, and we will provide any additional notice required for a material change.