Privacy

How HiMyDo handles your data, in plain words.

What is stored

Your name and email address, your organisation's name and timezone, and the work you put in: projects, tasks, comments, teams and settings. Passwords are stored only as bcrypt hashes.

Who can see it

Only people in your organisation, and only what your roles and sharing allow. Nothing is shared between organisations. The people who operate HiMyDo can see organisation names, sizes and delivery logs for support, and can reach the database as any administrator of a server can.

Your integration credentials

WhatsApp and email credentials you enter are encrypted with AES-256-GCM before being stored, with a key that is kept outside the database. They are never shown back to the browser and never leave the server except to Meta or your email provider.

Messages we send

Reminders, digests, invites and notices go out through your own WhatsApp and email providers. HiMyDo sends email from its own mailbox only to confirm your address.

Cookies

One cookie holds your sign-in session. There are no advertising or tracking cookies and no third-party analytics.

Deleting your data

An admin can delete people and their work. To delete a whole organisation, ask us and it is removed with everything in it.