Data Governance

Data Retention & Protection Policy

Effective Date: October 2026 · Official governance guidelines for gidto.com

Zero Cross-Tenant Leakage

Every database read, write, and deletion query is strictly scoped by authenticated User ID. Your workspace data is completely isolated.

30-Day Trash Lifecycle

Deleted notes in Notes Studio enter a 30-day protected archive before automated purge, allowing full recovery of accidental deletions.

1. Local Storage vs. Cloud Synchronization

Gidto is designed to respect your data autonomy:

Guest Mode Data: All saved tabs, Kanban boards, and note drafts are stored strictly inside your browser's local storage (localStorage). No personal data or link information is sent to our servers until you choose to authenticate.
Pro Cloud Synchronized Data: When authenticated via Google OAuth, your workspace synchronizes with our encrypted cloud backend in real time, making links, notes, and task progress instantly accessible across all your authorized devices and the Chrome extension.

We implement comprehensive cryptographic protections:

In Transit: All HTTP API traffic between your browser, extension, and backend is encrypted using TLS 1.3. Plaintext HTTP traffic is rejected.
At Rest: Cloud databases enforce AES-256 block encryption on disk with automated key rotation.
Session Cookies: Auth sessions use cryptographically signed HTTP-only cookies (__gidto_session) with SameSite=Lax and 30-day maximum lifetime.

When utilizing Gidto's AI features (such as AI Project Generation, Link Auto-categorization, or Media Review feedback summarization):

Prompts sent to AI model APIs consist solely of the specific project prompt, comment text, or note excerpt you explicitly submit for processing.
Your personal links and private workspace contents are never used to train public machine learning models.
AI usage records (timestamp, token counts, and feature name) are logged strictly for performance monitoring and billing accountability.

You may take your data with you at any time. Under Settings > Data & Storage, you can download:

Netscape HTML Bookmarks: Standard bookmark backup file directly importable into Google Chrome, Brave, Mozilla Firefox, Apple Safari, and Microsoft Edge.
JSON Data Archive: Raw structured JSON export of all saved links, tags, descriptions, and creation timestamps for custom integrations.

You have the absolute right to delete your data at any time:

Self-Service Link Clearing: You can purge all saved links immediately via the Danger Zone in your account settings.
Complete Account Deletion: Send an email from your registered account to privacy@gidto.com requesting account termination. All associated documents, notes, projects, and session tokens will be permanently scrubbed within 7 business days.