1. Introduction
RAG Knowledge Platform (“the Platform”, “we”, “our”, “us”) is an AI-powered system that helps organisations manage, index, search, and interact with internal knowledge securely. This Privacy Policy explains how we collect, use, store, and protect user information when you use our application, including any integrations with Google APIs.
By using the Platform, you agree to the practices described in this Privacy Policy.
2. Information We Collect
2.1. Information You Provide Directly
- Uploaded documents and files
- Sync cloud and third party folders
- User profile information (name, email)
- Organisation information
- Messages or queries submitted to the chatbot
- Feedback provided via forms or widgets
2.2. Information Collected Automatically
- Device and browser information
- IP address
- Usage logs (queries, timestamps, interaction events)
- System performance data
2.2. Information Collected Automatically
The Platform may access certain Google user data when you grant permissions, such as:
- Google Drive files & metadata (for data ingestion and indexing)
- Email address (for authentication or report delivery)
We only request the minimum scopes necessary and do NOT access, store, or use Google user data beyond the stated purpose.
3. How We Use Your Information
We use the information we collect to:
- Provide and improve AI search and chat functionalities
- Synchronise documents from Google Drive
- Perform analytics to improve search accuracy
- Troubleshoot, maintain reliability and security
- Notify users about system activity (optional)
We do not sell, share, or monetise user data.
4. Data Storage & Security
- All data is encrypted in transit (HTTPS/TLS)
- Files and embeddings are stored securely in company-managed cloud storage
- Access controls ensure only authorised users can view internal data
- Google OAuth tokens are encrypted and stored securely, and never shared with other services
5. Data Access & Deletion
Users or organisations may request:
- Data export
- Data correction
- Data deletion
- Revocation of Google API permissions
You can revoke Google permissions anytime via:
https://myaccount.google.com/permissions
6. Third-Party Services
The Platform may use:
- Google Cloud Platform (GCP)
- Vector database providers
- Email delivery services
These providers follow strict security and privacy standards.
7. Children's Privacy
This platform is intended for organisational/business use only and is not directed at children under 13.
8. Updates to This Privacy Policy
We may update this policy occasionally. Updates will be posted on this page with a revised “Last updated” date.
9. Contact
If you have questions about this Privacy Policy, contact:
📧 [email protected]
