AION TechnologiesSmart Apps for Complete Control
EnglishEspañol

TodoGroupApps.com Website

Cookie Policy

Version: 1.0
Effective Date: July 27, 2026
Last Updated: July 27, 2026

1. Scope

This Cookie Policy explains how TodoGroup Apps, a DBA of AION Technologies LLC ("TodoGroup Apps," "we," "us," or "our"), uses cookies and similar technologies on https://www.todogroupapps.com and its English- and Spanish-language pages (the "Website"). It supplements the Website Privacy Policy. It does not govern technologies inside TodoClean, TodoMow, TodoBuild, or another application; separate product notices may apply.

The inventory below reflects our review of the Website's code, not an independent scan of production browsers, Cloudflare account settings, or externally injected tags. Items marked as pending confirmation will be verified in production, and this Policy will be updated as needed.

2. Cookies and Similar Technologies

A cookie is a small text file a website asks a browser to store and return. A first-party cookie is associated with the Website's domain; a third-party cookie is associated with another provider's domain. Session cookies generally expire when a session ends, while persistent cookies remain until their stated expiry or deletion.

Similar technologies include:

  • local storage and session storage, which store data in a browser without using a traditional cookie;
  • pixels, web beacons, and tags, which may record that content loaded or an action occurred;
  • software development kits (SDKs), primarily used in applications rather than ordinary web pages;
  • device or browser identifiers, including values derived from browser or network information; and
  • embedded content, which may allow an external provider to receive IP address, browser details, and interaction data.

This Policy uses "cookies" as a convenient collective term unless context requires a distinction.

3. Categories

3.1 Strictly necessary

These technologies support essential operation, security, network delivery, form transmission, fraud prevention, load balancing, and storing a privacy choice. They generally cannot be disabled through a preference center where they are genuinely necessary, although browser controls may still block them and impair the Website. A technology is not necessary merely because it is convenient.

3.2 Functional

Functional technologies remember choices such as language, display, or convenience settings. Depending on jurisdiction and whether the feature was explicitly requested, consent may be required. The Website uses a lang local-storage value on certain utility pages; other pages switch language without visibly persisting it in the shared script.

3.3 Analytics and performance

Analytics technologies measure visits, page use, errors, and performance. Performance tools may measure load times and technical reliability. Our consent code provides an analytics category but currently contains only a commented example hook; no active third-party analytics tag was found in the reviewed Website code. As of the Effective Date, we have not independently confirmed whether Cloudflare Web Analytics, account-level script injections, log-based analytics, or other production analytics tags are active on the Website. We will update this Policy if that changes.

3.4 Advertising and targeting

These technologies may measure campaigns, build audiences, personalize advertising, or track activity across services. Our consent code provides a marketing category but currently contains only a commented example hook; no active advertising pixel was found in the reviewed Website code. As of the Effective Date, we have not independently confirmed link-decoration practices, social platform pixels, retargeting technologies, or advertising tags outside the reviewed Website code. We will update this Policy if that changes.

4. Verified and Potential Technologies

Cookie or Technology Provider Category Purpose Duration First or Third Party Consent Required Verification Status
todogroupapps_cookie_consent (browser local storage) TodoGroup Apps Strictly necessary / preference record Stores consent version, necessary status, analytics and marketing choices, and update timestamp No coded expiration; remains until cleared or overwritten First party No, for storing the visitor's privacy choice Verified in assets/cookie-consent.js; production behavior subject to periodic review
lang (browser local storage) TodoGroup Apps Functional Remembers English or Spanish on certain Stripe-related and billing utility pages No coded expiration; remains until cleared or overwritten First party Subject to confirmation Verified on billing.html, connect-return.html, and connect-refresh.html; scope may change
Browser/network security identifiers or cookies Cloudflare Strictly necessary or security, depending on configuration Hosting, delivery, traffic management, bot or abuse protection, and security Subject to confirmation First or third party depending on hostname/configuration Usually not required where strictly necessary; each use is evaluated individually Cloudflare Pages Functions/project use verified; full production cookie inventory subject to ongoing review
Server request and security logs Cloudflare and/or TodoGroup Apps Strictly necessary / security / performance Deliver requests, diagnose failures, secure systems, and investigate abuse Subject to confirmation Not necessarily browser storage Usually not a cookie-consent item; this Policy still applies Inherent to hosting; retention settings subject to ongoing review
Microsoft identity endpoints and Microsoft Graph requests Microsoft / TodoGroup Apps Strictly necessary for form delivery Server-side authentication and delivery of early-access/waitlist submissions by email Subject to confirmation Server-to-server; does not set visitor cookies No visitor cookie consent expected for server-side delivery Verified in Pages Function source; production tenant and retention subject to ongoing review
WhatsApp outbound link Meta / WhatsApp Third-party link; functional only after visitor action Opens WhatsApp with pre-filled message text Subject to WhatsApp; no Website cookie duration Third party after click Website consent generally not required for a plain link Verified as outbound wa.me links; no embedded WhatsApp SDK found
Instagram, Facebook, TikTok, and LinkedIn outbound links Respective platforms Third-party links Opens social profiles Subject to platform after click Third party after click Generally not required for a plain link Verified in shared footer as links; no social embeds/pixels found
Stripe-related outbound or return flow technologies Stripe and TodoGroup Apps Functional / payment / security Supports Stripe account setup, return, refresh, or payment-related flows Subject to confirmation First and/or third party Depends on flow and technology; subject to confirmation Stripe-related utility pages and copy verified; full production flow and cookies subject to ongoing review
Apple App Store or Google Play link technologies Apple / Google Third-party links Opens an application listing or platform service Subject to provider after click Third party after click Generally not required for a plain link References found in Website/legal copy; active destination inventory subject to ongoing review
Analytics tool Not currently in use Analytics Audience and Website measurement Not applicable Not applicable Yes, where required, before activation No active analytics initialization found in reviewed Website code
Advertising pixel or tag Not currently in use Advertising and targeting Campaign measurement, audience creation, or targeted advertising Not applicable Not applicable Yes, where required, before activation; opt-out may also apply No active advertising pixel found in reviewed Website code

We will not add a cookie name, provider, or expiration to this table without technical verification. We periodically review a fresh browser, each public route, both language versions, the pre-consent state, each preference combination, form submission, link handoff, and authenticated or payment-related utility pages where in scope.

5. How We Use These Technologies

We may use verified technologies to:

  1. deliver pages and forms;
  2. remember privacy and language choices;
  3. protect the Website and diagnose errors;
  4. understand performance and use, but only after required consent;
  5. measure or personalize marketing, but only if implemented with legally required consent and opt-out controls; and
  6. maintain evidence of a visitor's consent choice.

The presence of analytics and marketing toggles does not mean those tools are active. We will update the inventory above and the consent banner before enabling any such tool.

Where law requires consent, we do not read or write nonessential cookies or initiate nonessential tags until the visitor makes a valid choice. Consent must be specific, informed, freely given, and indicated by an affirmative action. Nonessential categories are off by default. Rejecting is as easy as accepting, and withdrawal is as easy as giving consent.

Our consent banner displays Accept All, Reject Non-Essential, and Manage Preferences, and defaults analytics and marketing toggles to off for a new visitor. It saves choices in local storage. It does not currently include a persistent footer control to reopen preferences, Global Privacy Control handling, a coded consent expiry, or a server-side consent log. We are working on these improvements; see Section 7 for how to change your choice in the meantime.

7. Changing or Withdrawing Your Choice

You may change your cookie choices at any time. Currently, the fastest way to do so is to clear this Website's local storage in your browser, which removes your saved consent record and causes the preference banner to appear again on your next visit. We are working to add a persistent "Cookie Preferences" link to the Website footer so you can reopen your choices without clearing storage; this Policy will be updated once that control is live.

A changed choice stops future nonessential collection and deletes nonessential first-party identifiers where technically feasible. Withdrawal does not make prior lawful processing unlawful and cannot automatically delete data already stored by an independent provider; you may use applicable privacy rights for that purpose.

Clearing Website storage in a browser will remove the saved consent record and may cause the banner to reappear. Choices may need to be made separately for different browsers, devices, profiles, or domains.

8. Browser and Device Controls

Most browsers allow you to view, block, or delete cookies and site storage. Blocking all storage may prevent consent and language choices from persisting and may interfere with forms, security, payment handoffs, or other requested features. Browser menus differ; consult the browser provider's help materials.

Mobile operating systems and applications may offer advertising identifiers, tracking permissions, privacy settings, or reset controls. Those controls are relevant to mobile applications and third-party platforms, not necessarily to storage on this public Website. Separate app notices explain app-specific SDKs and choices.

9. Global Privacy Control and Do Not Track

Global Privacy Control (GPC) is a browser-based opt-out signal that covered businesses must honor for sale or sharing in certain jurisdictions. Our consent code does not currently detect GPC. Before any regulated sale, sharing, targeted advertising, or advertising technology is enabled, the Website will detect recognized signals, disable the relevant category, prevent reactivation without a valid user action where law requires, and record the result.

Do Not Track (DNT) is a separate browser signal without a single uniform response standard. The Website does not contain DNT-specific logic. We will describe any response accurately if our practices change.

10. Consequences of Disabling Technologies

Rejecting analytics or marketing does not prevent ordinary access to public content. Blocking necessary storage or network security mechanisms may impair preference retention, security, form delivery, or utility-page flows. Disabling functional language storage may require choosing a language again. Third-party links remain governed by the destination's practices after you follow them.

11. Updates

We may update this Cookie Policy when technologies, providers, purposes, or law change. The Last Updated date will identify the revision. Material additions of nonessential technologies will trigger an inventory update, renewed consent where required, and testing before activation.

12. Contact

Website operator: TodoGroup Apps, a DBA of AION Technologies LLC
Privacy and legal email: legal@todogroupapps.com
General email: support@todogroupapps.com
Telephone / WhatsApp: +1 786-600-5400
Postal address: AION Technologies LLC, 4030 Wake Forest Rd, Raleigh, NC 27609

For broader information about personal information, rights, and disclosures, see the Website Privacy Policy.