Privacy Policy

Last Updated: April 2, 2026

1. Introduction

CloudDriveRAG ("Application," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Application.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Application.

2. Information We Collect

2.1 Google Drive Access

• When you authorize CloudDriveRAG to access your Google Drive, we obtain OAuth 2.0 tokens to read and download your documents (PDFs, Excel files, Word documents)
• We never store your Google password or full authentication credentials
• Your OAuth tokens are stored securely in local session storage and encrypted data files
• We only access files you explicitly select for ingestion into the knowledge base

2.2 Document Content

• When you ingest documents, we extract and process text content from your files
• This text is chunked, converted to vector embeddings, and stored in Qdrant vector database
• Document embeddings enable semantic search functionality for the chatbot feature
• Original files remain in your Google Drive and are not stored on our servers

2.3 Configuration Data

• LLM API Keys: OpenAI and Gemini API keys that you provide are stored locally in encrypted configuration files
• Qdrant Database Settings: URL, collection name, and optional authentication tokens
• User Preferences: Selected LLM provider, application settings

2.4 Chat Queries and Responses

• Chat queries and LLM responses are processed in real-time through the selected LLM provider (OpenAI, Gemini, or local Ollama)
• These interactions may be subject to the privacy policies of the respective LLM providers
• We do not log or store chat history by default

3. How We Use Your Information

• Document Processing: To extract text, create embeddings, and enable semantic search functionality
• Knowledge Base Management: To store vector embeddings in Qdrant for RAG (Retrieval-Augmented Generation) operations
• LLM Integration: To send queries and context to language models for generating contextual responses
• Application Functionality: To provide the core RAG chatbot experience you authorize
• Authentication: To maintain secure access to your Google Drive and manage sessions

4. Data Storage and Security

4.1 Local Storage

CloudDriveRAG is designed to run locally on your machine. Your data is stored in:

• Local file system (configuration files with API keys and settings)
• Qdrant vector database (can be local or remote as configured)
• Browser session storage (temporary authentication tokens)

4.2 Encryption and Protection

• API keys are stored in plain text in local configuration files. We recommend securing your deployment appropriately
• OAuth tokens are persisted across sessions but do not include your Google password
• All communication with external services (Google Drive, LLM providers, Qdrant) uses HTTPS/TLS encryption

4.3 Your Responsibility

As a self-hosted application, you are responsible for securing your deployment, including protecting API keys, securing your Qdrant database, and controlling access to your instance.

5. Third-Party Services

5.1 Google Drive API

We use Google Drive API to access your documents. Your use is subject to Google's Privacy Policy.

5.2 LLM Providers

• OpenAI: When you use OpenAI's models, text is sent to OpenAI's servers. See OpenAI's Privacy Policy
• Google Gemini: When you use Gemini, text is sent to Google's servers. See Google's Privacy Policy
• Ollama (Local): When using local Ollama, all processing happens on your machine with no external data transmission

5.3 Qdrant Vector Database

Vector embeddings are stored in Qdrant, which can be hosted locally or remotely. If using Qdrant Cloud, your data is subject to their privacy practices.

6. Data Sharing

We do NOT share your data with third parties, except:

• With Google (when accessing Google Drive)
• With your selected LLM provider (OpenAI or Gemini) when processing queries
• With Qdrant (if using remote Qdrant Cloud)
• As required by law or legal process

7. User Rights

You have the following rights regarding your data:

• Access: You can access your configuration and knowledge base at any time
• Modification: You can update your API keys and settings in the Settings page
• Deletion: You can reset or delete your knowledge base (vector embeddings) using the "Reset Knowledge Base" button
• Logout: You can disconnect from Google Drive to revoke access at any time

8. Data Retention

• Configuration Data: Retained indefinitely until you manually clear it
• OAuth Tokens: Retained until you explicitly logout or revoke access
• Vector Embeddings: Retained in Qdrant until you reset the knowledge base
• Chat History: Not stored; each session is independent

9. Children's Privacy

CloudDriveRAG is not intended for children under 13 years old. We do not knowingly collect information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information and terminate the child's account.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know whether your personal information is sold or disclosed
• Right to delete personal information collected
• Right to opt-out of the sale or sharing of personal information

11. European Privacy Rights (GDPR)

If you are in the European Union, you have the following rights under the General Data Protection Regulation:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this page.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at: