Privacy Policy
Last updated: 6 June 2026
1. Who we are
Dudle ("Dudle", "we", "us") is operated by Dudle App Labs, based in Ireland. Dudle provides free online PDF and document tools, including AI-assisted features and optional cloud-storage import. This policy explains what data we process and your rights over it. Questions: support@dudle.io.
2. Data we collect
- Account identity — when you sign in, our authentication provider (Clerk) gives us your email address, name, and sign-in identity (including your Google identity if you sign in with Google).
- Account records — we store your saved library items, workspaces, and plan/usage information in our database (Supabase).
- Files you upload — documents you upload, and text extracted from them, are processed to perform the operation you requested.
- Search queries — terms you enter into PDF Search.
- Technical data — IP address and request identifiers used for rate limiting and security; error diagnostics captured by our error-monitoring provider (Sentry).
- Browser storage — we use your browser's
localStorageto keep app and workspace state on your device. We do not use third-party advertising or analytics trackers.
3. Google user data (Google Drive)
If you choose to import a file from Google Drive, we request the Google Drive File scope (https://www.googleapis.com/auth/drive.file). Specifically:
- We access only the specific file(s) you select using the Google Picker. We never list, browse, or read your wider Google Drive.
- We use the selected file solely to perform the conversion or edit you requested.
- Downloaded copies are automatically deleted within one hour.
- Your Google OAuth tokens are encrypted at rest and are never exposed to your browser beyond a short-lived access token used to open the picker.
- You can disconnect Google Drive at any time within Dudle, or revoke access from your Google Account permissions page.
4. How we use your data
- To provide the document operations you request (merge, convert, compress, summarise, etc.).
- To authenticate your account and remember your library and workspaces.
- To enforce usage quotas and prevent abuse.
- To monitor errors and maintain the security and reliability of the service.
We do not sell your personal data, and we do not use your documents to train AI models.
5. Service providers (sub-processors)
We share data with the following providers only as needed to run the service:
- Clerk — authentication.
- Supabase — database / account storage.
- OpenRouter (with Groq and other model providers) — AI summary, chat, and template features. Relevant document text is sent only when you invoke an AI feature.
- Serper.dev and Brave — web search results for PDF Search.
- DeepL and Google Translate — document translation, when you use it.
- Gotenberg — document/format conversion.
- Sentry — error monitoring.
- Railway — application hosting.
6. Data retention
Uploaded files and generated output are deleted within one hour (immediately after processing, with a sweeper as backstop). Account and library data are retained until you delete them or close your account.
7. Your rights (GDPR)
Depending on where you live, you have rights under the EU GDPR (access, rectification, erasure, portability, restriction, objection, and the right to lodge a complaint with a supervisory authority) and under the California CCPA/CPRA (to know, delete, and opt out of "sale" — note we do not sell data). To exercise any right, email support@dudle.io.
8. Security
We use encryption in transit, encrypt stored OAuth tokens at rest, keep uploaded files only briefly, apply rate limiting, and give uploaded files randomised names that are not publicly enumerable. No method of transmission or storage is perfectly secure, but we work to protect your data.
9. Children
Dudle is not directed at children under 16, and we do not knowingly collect their personal data.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with a revised "Last updated" date.
11. Contact
Dudle App Labs — support@dudle.io (secondary: hnpandith@gmail.com).
Vantage East, Central Park, Dublin, Ireland D18 HD40.