Rudeus

Privacy Policy

Effective 26 August 2026

What this policy covers

This policy covers the Rudeus WhatsApp assistant and the pages on rudeus.uk. It explains the information Rudeus receives, how it is used, which service providers process it, and how you can remove it.

Information Rudeus receives

WhatsApp information

When you message Rudeus, Meta provides your WhatsApp phone number, message identifiers, message text and any image, audio file or document you send. Rudeus uses the phone number as its internal user identity so replies, reminders and an optional Google connection remain attached to the correct chat.

Google account and Calendar information

If you choose to connect Google, Rudeus receives your Google account identifier, email address, the permissions you granted and OAuth credentials that allow the connection to continue.

For Calendar requests, Rudeus may process event titles, dates, times, time zones and status. When you ask for event details or a change, it may also process descriptions, locations, organiser and attendee email addresses, attendance status, meeting links and the event fields you ask it to write.

Rudeus currently requests Google Calendar permissions. It does not request access to Gmail, Google Drive, Docs, Sheets, Slides or Contacts.

Website information

Rudeus’s own website responses do not set cookies, run advertising trackers or use browser analytics. Cloudflare processes ordinary request information, such as IP address, browser details and request time, to deliver and protect the site.

How the information is used

Rudeus uses WhatsApp and Google data to answer your request, maintain the current conversation, deliver reminders, prevent duplicate actions, protect the service and investigate failures.

Relevant parts of a Calendar request and the Calendar result are processed by the Rudeus agent running on Google Cloud. This lets the agent understand requests such as “What is my first meeting about?” and prepare a useful answer. Event details and links needed for that answer can therefore be processed by the model. Google access tokens, refresh tokens and the stable identifier used to bind your Google account are kept outside the model.

Creating, changing or deleting a Calendar event requires a separate confirmation in WhatsApp. Rudeus does not use Calendar content as permission to take another action.

Google API data

Rudeus uses information received from Google APIs only to provide or improve the user-facing Calendar features that you request. It does not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train a general-purpose or non-personalised AI model.

Rudeus transfers Google user data only when needed to provide these features through its service providers, when you direct a disclosure, for security purposes, or when required by law. A person will not read your Google Calendar data unless you ask for support and consent to that access, access is needed to investigate abuse or a security incident, or the law requires it.

Rudeus’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Service providers

Rudeus uses Meta and WhatsApp for the messaging channel, Cloudflare for request handling and durable application state, and Google Cloud and Google APIs for the agent, document processing and Calendar operations. These providers process information on Rudeus’s behalf or under your account relationship with them. Their own terms and privacy policies also apply.

Rudeus does not sell personal information. It does not share Google Calendar data with data brokers, advertising networks or unrelated third parties.

Operational measurements

Rudeus records limited measurements after a completed request, including response time, which tool or action type was used, whether sources were returned and whether an attachment or voice reply was produced. These measurements do not contain your phone number, message text, answer text, Google identity or Calendar content.

Storage and retention

Recent conversation text and short Calendar summaries are kept for continuity and normally expire after ten minutes without activity. Short-lived Calendar references expire after thirty minutes. Pending Calendar changes expire after fifteen minutes, and bounded records used to prevent a confirmed change from running twice can remain for up to twenty-four hours.

Your encrypted Google credentials remain in a per-user Cloudflare Durable Object until you disconnect, Google revokes the grant, or the connection becomes invalid. Rudeus downloads WhatsApp attachments to process the current request; it does not add those chat attachments to the permanent document library unless that is a separate feature you deliberately use.

Basic WhatsApp account metadata, active reminders and limited operational records can remain longer when needed to operate the service. You may request deletion using the contact address below. Rudeus may retain information when the law requires it or when it is needed to resolve fraud, abuse or security incidents.

Your controls

• Send /logout in WhatsApp to remove the local Google connection immediately and request revocation from Google.
• Remove Rudeus from your Google Account’s third-party connections page to revoke Google access directly.
• Send clear in WhatsApp to clear recent conversation context.
• Email eebehuur13@gmail.com to ask what personal information Rudeus holds, correct it or request deletion. Identity verification may be required before a request is completed.

Your legal rights depend on where you live and may include access, correction, deletion, restriction, objection and data portability.

Security and international processing

Rudeus uses HTTPS in transit, encrypts Google credentials at rest, limits credentials to the component that calls Google, and uses short-lived signed permissions between its services. No internet service can promise absolute security.

Cloudflare, Meta and Google operate internationally. Your information may therefore be processed outside the country where you live, subject to the safeguards and contractual commitments those providers apply.

Children

Rudeus is not directed to children under 13. If you believe a child has provided personal information, contact us so it can be reviewed and deleted where appropriate.

Changes and contact

This policy will be updated when Rudeus changes how it handles personal information. The effective date at the top will change when a material revision is published.

Questions and privacy requests can be sent to eebehuur13@gmail.com.