LoginPrivacy Policy
Effective October 21, 2026
Protecting the information you entrust to us is central to our product design, our business model, and our values. This Privacy Policy explains what data we collect through the Didit website, applications, and related services (together, the “Service”), how we use and safeguard that data, the limited circumstances in which we share it, and the choices available to you. It complements, and is interpreted consistently with, our User Terms of Service.
1. Scope
Didit, Inc. (“Didit,” “we,” “us”) is the data controller for personal information processed through the Service, meaning we decide how and why that information is processed.
This policy covers information Didit handles directly. If you connect third-party tools or share data with others, their privacy practices are governed by their own policies. Section 4 explains how Didit handles contacts you import from your phone or from a connected Google account.
2. Information We Collect
When you create an account, we ask for a display name, an e-mail address, a mobile phone number and a password. You may later add optional profile details such as a photo, company name or job title. As you work you may upload files, comments, task descriptions, or other content (“User Content”). Our servers also automatically record technical details—IP address, browser or device type, settings, the features you use, crash reports, and cookies or similar identifiers—to keep the Service running smoothly.
If you choose to import contacts from your phone or from a Google account, we collect the contact information described in Section 4.
If you upgrade to a paid plan, our payment processor (acting on our behalf) collects the billing name, address, and card or bank information needed to complete the transaction. Didit itself stores only a token, never full card data.
3. How We Use Information
We process personal information to deliver, administer, and secure the Service; to answer your questions and provide customer support; to monitor, debug, and improve performance; to develop new features and train internal quality models; and to comply with legal obligations. Some features may use aggregated or anonymized usage patterns to improve Didit’s performance or train AI-assisted functionality, but we do not use your private User Content for these purposes. This also does not apply to contacts you import; we never use them to develop, improve, or train any artificial intelligence or machine learning model (see Section 4).
Where allowed by law, we also use your contact details to send important operational notices and occasional product tips. You may opt out of non-essential e-mail at any time by following the unsubscribe link or contacting us.
User Content is processed only so that you and anyone you explicitly share it with can view, edit, or sync it across devices. We do not publish your private data, and we do not use User Content to target advertising.
We never sell or rent personal information.
4. Contacts You Import
Didit can import contacts so you can find people quickly when you assign a task. Importing is optional and stays off until you turn it on for a Didit account.
What we import
- From your phone: when you allow access to your phone’s contacts and turn on importing for an account, Didit reads your phone’s address book.
- From Google: when you connect a Google account, Didit reads your Google contacts with read-only access (the contacts.readonly permission).
For each contact, Didit stores the name, email addresses, phone numbers, postal addresses, company and job title. Didit does not import contacts that have no email address. Didit never changes or deletes contacts on your phone or in your Google account.
How we use imported contacts
We use imported contacts only to suggest people when you assign a task, add a watcher, or create a task by voice, and to let you add them to your Didit contacts. Imported contacts belong to the Didit account that imported them. They are visible only to you, on the devices where you use that account.
We do not sell imported contacts. We do not use them for advertising, and we do not share them with other Didit users or with third parties, except service providers that host and operate Didit on our behalf under confidentiality obligations. We do not use them to train artificial intelligence or machine learning models. Didit never contacts anyone in your imported contacts on its own; a person is notified only when you choose to assign them a task or add them as a watcher.
Our staff do not read your imported contacts unless you ask us to for support, it is needed for security or to comply with the law, or the data has been aggregated and anonymized.
You control your imported contacts
Imported contacts are kept separate from your Didit contacts, and you can review and remove them at any time. Any imported contact you have never used on a Didit task can be removed completely, from every device where you use that account and from our servers. Removing an imported contact does not affect your phone’s address book or your Google account.
Didit also deletes all of a source’s imported contacts from our servers and from your devices when:
- You remove the source, or turn off importing from your phone.
- You remove the Didit account from that phone (phone contacts only).
- You delete your Didit account (completed within 30 days, as described in Section 8).
Once you use a contact on a task, it becomes one of your Didit contacts, because the task and the people working on it depend on it. You can delete Didit contacts yourself at any time, and they are deleted when you delete your Didit account.
Google connections
When you connect a Google account, we store an access token that lets Didit refresh your Google contacts in the background. We use this token only to read your contacts. Imported contacts and access tokens are encrypted in transit and encrypted at rest on our servers. You can disconnect at any time by removing the source in Didit, or in your Google Account under Security > Third-party apps with account access. Disconnecting deletes that source’s imported contacts as described above.
Didit’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. When We Share Information
We disclose information only as needed to operate our business or when required by law. Contacts you import are handled more narrowly than this section describes; see Section 4. Typical recipients are:
- Service providers that host infrastructure, deliver e-mail, process payments, or assist with analytics. They may access data solely to perform contracted tasks and must safeguard it.
- Legal or public authorities if we believe in good faith that disclosure is necessary to comply with a valid subpoena, court order, or similar process, or to prevent serious harm.
- Successor entities in the event of a merger, acquisition, or asset sale. Any new owner will honor the commitments in this policy unless it notifies you and offers a choice.
Didit may also share aggregated or de-identified statistics—never data that can reasonably identify you—to help us explain product performance or market trends.
6. Cookies and Analytics
Didit uses essential and analytics cookies to keep you signed in, remember preferences, and understand how the Service is used. We also use Apollo.io for website visitor analytics and company-level identification. For details, and for options to manage your settings, see our separate Cookies Notice.
7. Security
All traffic between your device and Didit is encrypted in transit using TLS. Data stored on our servers, including contacts you import and the access tokens for connected accounts, is encrypted at rest. Passwords are salted and hashed; we never store them in plain text. Systems are segmented, access is role-based, and staff receive regular security training. No Internet service can guarantee absolute protection, but we continually test and refine our safeguards to reduce risk.
8. Data Retention
Account data is kept for as long as your account remains active. If you delete your account, we permanently remove your User Content, imported contacts, and personal information within 30 days, unless a longer period is required by law. Basic server logs containing IP addresses are retained for up to 90 days, and the last successful IP used to sign in is kept for up to 12 months to aid abuse prevention.
9. Your Choices and Rights
You may, at any time:
- review and update profile details from your account settings;
- request a copy of your data by emailing privacy@didit.co;
- permanently delete your account;
- review and remove contacts you’ve imported, or disconnect a Google account, from within Didit (see Section 4).
Didit does not sell personal data. Depending on applicable privacy laws, you may have rights to access, correct, delete, port, or limit the use of your information. Didit strives to honor valid requests from all users to the extent technically feasible and not overridden by legal obligations. To make a request, email privacy@didit.co.
10. Children’s Privacy
The Service is directed to users who are at least 13 years old. We do not knowingly collect personal information from children under 13, or under 16 where local law sets that higher threshold. If we learn that we have done so inadvertently we will delete the information as quickly as possible.
11. International Data Transfers
Didit is headquartered in Nevada, USA. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed on U.S. servers. Should we later serve regions that impose cross-border-transfer rules, we will adopt appropriate safeguards such as Standard Contractual Clauses or successor frameworks and update this notice.
12. Changes to This Policy
We may revise this Privacy Policy to reflect new features, legal requirements, or security improvements. When changes are significant, we will provide notice through the Service before they take effect. The date at the top indicates when the latest version became effective. Continued use of the Service after a revision means you accept the updated terms.
13. Contact
For privacy questions or requests, write to privacy@didit.co. For other legal matters, write to legal@didit.co. We will respond as promptly as possible, and always within any time frame required by applicable law.