+ Add Question

Gmail plugin privacy question

RG

Does installing the todoist gmail plugin give it access to my email content? If yes, what specific content does todoist access? And what content could the app potentially access?

I am basically trying to figure out whether my company data policy lets me use the gmail plugin or not.

All responses

Brendon Wadey staff
Replied on Mar 25, 2014 - 02:10

Hi Rushabh,

The Todoist plugin for Gmail does not have access to your email information. It grabs the URL of the email and adds it to Todoist, but that is the only thing it reads.

Regards,
Brendon.

RG
Rushabh Gandhi premium
Replied on Mar 25, 2014 - 16:57

Thanks Brendon. The 2nd part of my question is could the plugin be updated to access more information without explicit content from the user (e.g. in Android the user has to grant the app additional permissions)?

RG
Rushabh Gandhi premium
Replied on Mar 25, 2014 - 16:57

without explicit *consent*

Brendon Wadey staff
Replied on Mar 25, 2014 - 17:25

Rushabh,

The Gmail plugin is just an extension to your browser, and shows the Permissions needed upon installation. It works exactly like mobile apps, and you would need to confirm the changes.

Regards,
Brendon.

RG
Rushabh Gandhi premium
Replied on Mar 25, 2014 - 19:14

The permissions when you install it says "Access your data on *.todoist.com and mail.google.com". So what specific data am I permitting the app to access on mail.google.com?

David Trey staff
Replied on Mar 25, 2014 - 19:23

Hello Rushabh,

This is a very unfortunate phrasing. We have absolutely no access to any of your data in your inbox. This permission must be displayed because of the way the plugin works, namely - it is aware of the URL of the page you're on.

If you're on any website, and then click on "Add website as task", it will "grab" the URL to add it as a task. If you're in Gmail, then when it sees "mail.google.com", the link changes to "Add email as task" when you open a message in your Inbox so that you can link this specific message to a task. This method, however, doesn't give us any permission to read the message, but because the task name will include the email's subject and this "awareness of the URL" is in place, the permission list will include these domains.

There is another separate feature "Email tasks to this project" (accessed via right-click on a project) which allows you to actually send the email to a Todoist project - this feature will actually convert the whole mail to a task note. However, even in such case, given our very high security and privacy policies, no one would read it as we don't access user data at all.


Best regards,
David

RG
Rushabh Gandhi premium
Replied on Mar 25, 2014 - 20:16

Thanks David this is the info I was looking for.