Privacy
This page records the current implementation for review. It is not a final published privacy notice. Responsible publisher identity, retention periods and applicable processing arrangements must be confirmed.
What the connector handles
The connector processes the Microsoft To Do lists, task fields, notes, schedules, checklist steps, links and attachment data needed for your requested actions. Requested results return to ChatGPT through the connected tool call.
Sign-in and permissions
Sign-in uses Microsoft Entra and the host’s authorization flow. The connector does not collect your Microsoft password. It validates the incoming API token and uses Microsoft’s MSAL library to obtain delegated Graph access for that request.
Storage and transfers
There is no connector database or persistent task mirror. MSAL uses an in-memory token cache. File transfers can use bounded, private temporary files; ordinary success and error paths remove them. Abrupt termination may bypass ordinary cleanup, so stronger deletion guarantees are not asserted here.
Diagnostics
Connector diagnostics include correlation IDs, operation stages, bounded error codes, counts and selected authentication timing/cache information. The connector does not deliberately log task bodies, tokens or signed file URLs. Hosting and identity providers may maintain additional request and security logs.
Retention details need confirmation
Log retention, operator access, provider processing roles and international handling have not been finalized. Do not interpret this draft as a zero-retention or immediate-deletion promise.
Privacy contact
For privacy questions or requests, email support@comerapps.com.
Your controls
You can manage the host connection and Microsoft consent. Disconnecting does not delete Microsoft To Do tasks. Task deletion changes the connected Microsoft account; it is separate from provider log retention.
Service providers
The current test implementation uses ChatGPT, Microsoft Entra/Microsoft Graph and Render hosting. Their own services and policies also apply. Final publication must accurately describe the approved production arrangement.
Donations
Task features are intended to remain free for this release. No payment or donation flow is implemented in this candidate. Any future optional donation arrangement requires a separate data-handling review.