Information we process
We process account details such as your email address, display name, profile image, and authentication identifier. We also process the content you create in DoneOS, including goals, key results, work items, comments, execution events, and integration settings.
When you connect Slack, we process the workspace and channel details needed to publish status updates. Slack access tokens are encrypted and are never returned to the app. Agent credentials are stored as one-way hashes; the raw credential is shown only when it is created.
When you connect DoneOS to ChatGPT or another MCP client, that client can access the DoneOS data and actions covered by the permissions you approve. DoneOS issues a scoped OAuth access token to the client, records attributable execution changes, and returns requested DoneOS data to that client. OpenAI processes data sent through ChatGPT under its own terms and privacy policy.
When you request beta access, we process the contact and workflow details you submit so we can evaluate your application and contact you about DoneOS. Beta applications are stored using Google Forms.
How we use information
We use this information to authenticate you, synchronize your work, maintain execution history, authorize agents, publish updates you request, protect accounts, diagnose failures, and improve DoneOS. We do not sell personal information.
Analytics
Product analytics may record feature usage and technical diagnostics. Analytics events do not include goal titles, work-item titles, descriptions, or tags. You can disable product analytics in the Account screen.
Feedback and app updates
When you send feedback, we store the category, summary, and details you provide in a private support report. Native app reports include app version, patch number, and platform, and are linked to your authentication identifier so you can view your receipts. Website reports include the page path, viewport, browser, and submission time. We do not automatically attach account emails, work content, or logs.
The app can prepare a screenshot locally when you open feedback. It is included by default when a capture is available. You can turn off Include this screenshot before sending; nothing is uploaded until you submit the report. Review it and use Hide to cover sensitive details before sharing. Reports are delivered to a private Human Quest GitHub repository. Screenshots are stored privately in Google Cloud and scheduled for deletion after 90 days; storage cleanup can take additional processing time, with recoverable backups retained for another 7 days. Deleting your account removes its screenshots and queues removal of your report content from GitHub.
Supported mobile builds use Shorebird to check for and download app updates. The update service receives technical information needed to select a compatible update, such as app, platform, release, and patch identifiers, along with network request information. It does not receive your DoneOS goals, work items, or feedback content.
Service providers
DoneOS uses Firebase and Google Cloud for authentication, storage, server functions, analytics, and diagnostics. Slack data is processed only after you connect a workspace and use status publishing. OpenAI processes DoneOS data only when you connect and use the DoneOS plugin through ChatGPT or another OpenAI surface. GitHub processes private feedback reports for our team, and Shorebird provides mobile app update delivery.
Retention and deletion
We retain account and execution data while your account is active. You can revoke agent keys, disconnect integrations, and permanently delete your account from the app. Account deletion removes your DoneOS data and authentication account, subject to records we must retain for security or legal obligations.
Security
DoneOS uses user-scoped access controls, encrypted integration secrets, revocable agent keys, and append-only execution history. No storage or transmission method is completely secure.
Contact
DoneOS is operated by Human Quest LLC. Privacy questions can be sent to hq-support@googlegroups.com.