Privacy Policy

Last updated: 2026-04-12

1. What data we collect

We collect and store the following data associated with your account:

  • Account information provided through Google sign-in (your name, email address, and avatar image URL).
  • Folders and folder metadata that you create in the app.
  • Documents you upload (PDF files) and their derived text for search.
  • Chat conversations and individual messages you exchange with the AI assistant.
  • AI-generated derivatives such as quiz questions and flash cards (once those features ship).

2. Where your data is stored

  • Convex — primary database for folders, documents metadata, conversations, and messages; also stores the original PDF files you upload.
  • Cloudflare R2 — stores the extracted plain-text copy of each PDF used to build the retrieval index.
  • Cloudflare AI Search — stores vectorized chunks of your documents indexed against your user identifier so the assistant can answer questions from your materials.

All storage is scoped per-user. Budds does not share, sell, or publish your data.

3. How long we retain your data

Your data is retained for as long as your account is active. When you delete a document, folder, or conversation, we remove it from all storage systems. When you delete your account, we permanently remove all of your data from all storage systems within 24 hours.

4. How to delete your data

You can delete individual documents and folders from within the app. You can delete your entire account, and all associated data, from the user menu in the sidebar (Delete account). Deletion cascades across every storage system listed above.

5. How to export your data

You can export a copy of your data at any time from the sidebar user menu (Export my data). The export is a .zip file containing your folder structure, documents, chat history, and AI-generated content as JSON files, alongside the original PDF files you uploaded.

6. Your responsibility as a user

You must have the legal right to upload and store the content you bring into Budds. This includes respecting copyright and not uploading other individuals' personal information without their consent. See our Terms of Service for details.

7. Third-party processors

  • Google — authentication via Google OAuth.
  • Cloudflare — R2 object storage, AI Search retrieval index, and AI Gateway for routing LLM requests.
  • OpenRouter — routes requests to underlying large language model providers that generate answers, quizzes, and flash cards.

Each processor handles only the data required to deliver their part of the service and is bound by their own terms and privacy commitments.

8. Contact

Questions about this policy or requests about your data can be sent to support@budds.app.