Privacy

What we collect, and why.

TopDo.ai is in private beta. This notice describes the information the site and the product handle today, not a future roadmap.

Last updated 17 September 2026.

Who is responsible

TopDo.ai is a product of ML LABS. Write to hello@topdo.ai about anything on this page.

Joining the private beta list

The sign-up form asks for a name, an email address, and your agreement to be notified. We store exactly those three things, plus the version of the consent wording you agreed to and the time of the request.

Joining the list does not create an account or a workspace.
It does not sign you in and it collects no payment details.
Asking twice keeps your first request and returns the same receipt.
To rate-limit abuse we keep a short-lived one-way hash of the email address. It expires by itself and is not readable as an address.
We use the details to review beta access and to write to you about it. We do not sell them and do not use them for unrelated marketing.

Ask us to remove your request at any time by writing to hello@topdo.ai from the address you used.

Analytics, only if you allow them

No analytics script loads until you choose Allow on the bar at the bottom of the page. Choosing Decline loads nothing. Your choice is kept in your own browser under the key topdo.analytics-consent.v1, so it is not a record we hold about you.

After Allow we load Google Analytics 4 and Microsoft Clarity, each on a property that belongs to this product alone.
They run only on the public pages: the home page, pricing, the agent guide and the articles. They never run on sign-up, sign-in or inside a workspace.
Google Signals, user-provided data and ads personalization are off. Clarity runs with strict masking and sets no cookies before consent.
If your browser sends Do Not Track or Global Privacy Control we do not offer the bar and load nothing.

Withdrawing an Allow is a browser action, because the choice lives in your browser and nowhere else. Delete the topdo.analytics-consent.v1 key for this site — in your browser's site-data or storage settings — and reload. The consent bar returns, Google Analytics is disabled, Clarity is stopped, and both are sent a denied consent signal. Nothing loads again until you choose Allow a second time.

To have the analytics already collected about your visits deleted, write to hello@topdo.ai and we will make the request to Google and Microsoft on your behalf.

Accounts and workspaces

If you are invited and create an account, we hold your name, email address, a hash of your password, and the sessions that keep you signed in. We verify your email before a workspace opens.

Everything you put in a workspace — nodes, documents, tasks, comments, relationships — belongs to that workspace and is isolated from every other one in the database.
An AI agent reaches a workspace through a scoped key its members issue. Each agent action is recorded against the key that made it, and a key can be revoked.
We do not sell workspace content and we do not use it to train models.

Service providers

The site and the product run on Amazon Web Services. Google Analytics and Microsoft Clarity receive public-page analytics after you allow them. Payment, email delivery and error reporting providers receive only what their job requires, and only once that part of the service is switched on for your workspace.

How long we keep things

Beta list entries: until access opens or you ask us to remove yours.
Workspace content: until you delete it or close the workspace.
Rate-limit hashes: minutes, then they are deleted automatically.

Your choices

Ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to hello@topdo.ai and we will answer.

Changes

If this notice changes in a way that affects you, we will update the date above and, where it matters, tell the people on the beta list.