Rucks Privacy Policy

Effective Date: August 18, 2026 · Replaces the version dated August 16, 2026 — this update describes assistant-initiated connections: an AI assistant may request access through an authorization flow ending at your consent screen, assistant applications may self-register (their names are not verified by us), and connections may now cover trips, wishlist, and visited places — each only if you switch it on. Travel Profile facts, including medical information, remain unavailable to AI connections.

Our Privacy Commitment

1. Who We Are

This Privacy Policy applies to the products and services provided by:

OTB Capital, LLC, doing business as Rucks AI (“Rucks,” “we,” “our,” or “us”).

2. Information We Collect

Information You Provide

You may provide information including:

• your name
• email address
• profile information
• travel preferences
• uploaded documents
• photos you upload (for example, a cover photo for a place)
• itineraries
• notes
• conversations with Rucks
• manually entered travel history
• corrections to Traveler Memory
• support requests

Travel Profile Information

Your Travel Profile is an optional set of practical facts you may enter yourself, including seat preference, dietary requirements, allergies, medical notes, blood type, health and travel insurance details, and likes and dislikes. Some of this is health information; because of that it is handled more narrowly than the rest of your account:

• it exists only if you type it in — Rucks never extracts or infers Travel Profile facts from your email or any connected account;
• it is never used to train models and never leaves your account except through a share link you create, and then only the specific fields you select for that link;
• it is never included in connections to third-party AI assistants;
• it is deleted with your account, on the same timeline as everything else (see Data Retention).

Information From Connected Accounts

With your explicit authorization, Rucks can connect to the following services. Every connection is read-only: Rucks cannot send, modify or delete anything in a connected account, and the permissions it requests do not allow it to.

• Gmail (Google scope gmail.readonly): Rucks searches your mailbox for travel-related messages — booking confirmations for flights, hotels, restaurants, tickets and loyalty statements — and reads those messages (sender, subject, date and body) to extract your bookings. It does not read the rest of your inbox and never downloads attachments.
• Google Calendar (Google scope calendar.events.readonly): Rucks reads events on your primary calendar — title, dates, location and description — to place your travels on your timeline. Attendee lists are not stored. When you connect Google, Rucks also reads your account’s email address (userinfo.email) to label the connection.
• Outlook Mail and Outlook Calendar (Microsoft Mail.Read, Calendars.Read): the same, for Microsoft accounts.

You choose which services to connect, and you can untick a permission in the provider’s consent screen; Rucks refuses any grant broader than the read-only permissions above. Rucks keeps the matched messages and the travel events it extracted in your own account so bookings can be re-read as extraction improves; disconnecting an account erases everything Rucks read from it (see Data Retention). Any service we add later will be listed here before it launches.

Travel Information

Rucks may extract travel-related information such as:

• flights
• hotels
• rental cars
• cruises
• trains
• activities
• restaurants
• travel companions
• destinations
• travel dates
• booking confirmations

Information About Other People

Some information in your account may describe people other than you:

• Companions. Your account may record the names of people you traveled with (for example, “Traveled with Ana”) — either because you typed them, or because a booking confirmation you connected or forwarded named them as fellow travelers (such names are marked “from your booking” and you can remove any of them; a removed name is never re-added automatically). These names live only inside your account and appear outside it only in shares you explicitly authorize. For names you record yourself, you are responsible for having the right to record them.
• Family invitations. If you invite a family member to share with you, we process what they choose to show you under their own account and consent — not yours.
• Correspondence metadata. Travel confirmations naturally mention other parties (an airline’s sender address, a co-traveler copied on a booking). We retain this metadata as the evidence trail behind your Traveler Memory.

If you are not a Rucks user and believe a Rucks user has recorded information about you, contact privacy@rucks.ai and we will honor the rights available to you under applicable law.

Device Information

We may collect:

• browser type
• operating system
• IP address
• device identifiers
• language
• crash reports
• diagnostic information
• usage analytics
• precise device location (GPS) — only if you grant permission; see “Mobile App Permissions” below

Mobile App Permissions

The Rucks mobile app asks for a small set of device permissions. Each is optional, every feature works without it, and what each one does is stated on the permission prompt itself:

• Location. If you allow it, Rucks uses your approximate coordinates only while the app is open (never in the background) to answer location-aware questions like “what’s good near me” and to rank nearby places first. Your location is used transiently for that single request and is never stored in any account record, log, transcript, or prompt archive. City and country are resolved on your device.
• Photo Library (travel reconstruction). If you enable it, Rucks reads only the location and date of photos in your library — never the images, filenames, or thumbnails — on your device, to work out which cities you visited and when. We store only the resulting city-level travel moments. Your photos are never uploaded.
• Photo Library (cover photos). Separately, you may pick one photo from your library to use as the cover image for a place you’ve saved. That single chosen image is uploaded and stored on your own copy of that place; it is shown only to you, is never shared, and is deleted with your account.
• Microphone (voice mode). When you hold a voice conversation, your microphone is used only for that session. Your audio is streamed directly from your device to our AI provider, OpenAI, to power real-time speech (see “Third-Party AI Providers”). Rucks does not keep raw audio; only the resulting transcript is saved to your conversation history, exactly like a typed chat.

Waitlist

If you join the waitlist on rucks.ai, we store the email address you enter, the time you entered it, and which part of the page you used. We send one email asking you to confirm, and one more when Rucks is available for you. We use the address for nothing else, never share or sell it, and delete it when you ask — reply to either email, or write to privacy@rucks.ai. Waitlist addresses that are never confirmed are deleted after twelve months.

3. Traveler Memory

One of the unique features of Rucks is your Traveler Memory.

Traveler Memory may contain:

• travel history
• destinations
• trips
• AI-generated summaries
• inferred preferences
• travel statistics
• travel patterns
• confidence scores
• historical evolution of your preferences

Traveler Memory is created solely to provide services to you. It belongs to you.

4. How We Use Your Information

We use your information to:

• provide the Platform;
• reconstruct your travel history;
• build your Traveler Memory;
• improve recommendations;
• answer your questions;
• synchronize connected accounts;
• maintain account security;
• detect fraud;
• provide customer support;
• improve Platform performance;
• comply with legal obligations.

Legal Bases for Processing (EEA, UK, and similar jurisdictions)

Where the GDPR, UK GDPR, or a similar law applies, we process your personal data on these legal bases:

• Performance of a contract — providing the Platform you signed up for, including building and maintaining your Traveler Memory;
• Consent — connecting external accounts, sharing portions of your Traveler Memory, and granting access to AI assistants. You may withdraw consent at any time by disconnecting an account or revoking a share; withdrawal does not affect processing that happened before it;
• Legitimate interests — securing the Platform, preventing fraud and abuse, and maintaining audit records of access to your shares;
• Legal obligation — where retention or disclosure is required by law.

5. AI Processing

Artificial intelligence is used to:

• identify travel bookings;
• organize travel history;
• infer travel preferences;
• answer questions;
• summarize trips;
• compare destinations;
• generate recommendations;
• identify trends across your own travel history.

AI-generated conclusions are probabilistic. They may be incorrect. You may correct or reject them.

Automated Inference and Profiling

Inferring your travel preferences from your travel history is a form of automated profiling under some privacy laws. It exists solely to serve you: Rucks does not use these inferences to make decisions with legal or similarly significant effects about you — no pricing, no eligibility decisions, no advertising. Every inference is visible to you with the evidence behind it, and you may correct, reject, or delete any of them at any time. Where the law gives you a right to object to profiling, correcting or deleting an inference in the product is that objection, honored immediately.

6. How We Share Information

We do not sell your Traveler Memory. We do not sell your travel history. We do not sell your personal preferences. We do not sell your AI-generated Traveler Memory.

We share information only in the following circumstances:

• with your explicit authorization;
• with service providers acting on our behalf;
• to comply with legal obligations;
• to protect rights, safety, or security;
• in connection with a merger, acquisition, or sale of assets.

Permission-Based Sharing

Rucks is designed around explicit sharing. Every share starts with you, and every share works the same way: you choose what is shared, who receives it, how long access lasts, and you can revoke it with one tap. The sharing features currently available:

• Share links. You pick a named recipient (a hotel, a travel advisor, a friend) and the themes of your preferences they may see. The link shows exactly that slice — never your account internals, never your loyalty balances, and your loyalty program numbers only if you switch them on for that share. Links expire on the schedule you choose or when you revoke them.
• Supplier requests. A hotel or travel designer may ask to see a slice of your preferences. The ask waits for you; you trim or widen it, set its duration, and approve or decline. Declining simply makes their link stop working — nothing is said on your behalf. Rucks never sends anything to anyone for you.
• Family sharing. You and another adult may each choose what to show the other — two independent grants, each with its own scope and its own revoke. If one of you stops sharing, the other is told plainly; nothing is silently hidden and nothing is taken from them.
• AI assistants. You may connect an AI assistant of your choice (Claude, ChatGPT, or any assistant supporting the open MCP standard) to read defined sections of your Traveler Memory. A connection can begin either way: you may create a grant yourself, or the assistant may ask — in which case you are brought to a Rucks consent screen that names who is asking and exactly what they ask for, and nothing is granted until you approve. Assistant applications may register themselves with Rucks; a registered name is self-declared and not verified by us, and the consent screen tells you so, along with when the application registered. What an assistant may see is limited to the sections you switch on for that connection: preference themes, loyalty program numbers (never balances), your trips as titles, dates and places (never the underlying bookings, documents, or travel companions), your wishlist, and the places you have visited. Your Travel Profile facts — including anything medical — are never available to AI connections. Every read is recorded in your sharing audit, and you can disconnect any assistant at any time with immediate effect.

Access Records

Every read of one of your shares — by a person, a supplier, or a connected assistant — is recorded and shown to you in your sharing audit. This record exists so you always know whether and when something you shared was actually seen. It is part of your data and is deleted with your account.

7. Third-Party AI Providers

Rucks may use third-party AI providers to process your requests. These providers process information only as necessary to provide the requested service.

We do not permit them to use your personal content to train general-purpose AI models unless you explicitly consent or their processing is otherwise disclosed and permitted under applicable law.

Voice mode. When you use voice, your microphone audio is streamed directly from your device to OpenAI, which powers Rucks’ real-time speech, transcribes it, and returns spoken replies. Rucks does not record raw audio; the resulting transcript is saved to your conversation history like any typed chat. OpenAI processes this audio only to provide the service and does not use it to train general-purpose models.

8. Google User Data — Limited Use Disclosure

In particular, for information received from Google APIs (such as Gmail and Google Calendar):

• Google user data is used only to provide the user-facing feature you connected it for: rebuilding your own travel timeline and Traveler Memory.
• We do not transfer Google user data to third parties except as necessary to provide that feature, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
• We do not use Google user data for advertising of any kind.
• No humans read your Google user data except with your explicit permission (for example, a support request you initiate), for security purposes, to comply with law, or where the data has been aggregated and anonymized.
• We do not use Google user data to train generalized artificial-intelligence or machine-learning models.

9. Data Retention

We retain information only as long as reasonably necessary to:

• provide the Platform;
• maintain Traveler Memory;
• comply with legal obligations;
• resolve disputes;
• enforce agreements;
• maintain Platform security.

Account Deletion — Actual Timelines

When you delete your account, here is exactly what happens:

• 30-day grace period. Your account is deactivated immediately and scheduled for permanent deletion 30 days later. You can cancel and restore your account at any point during those 30 days.
• Automatic permanent deletion. When the grace period lapses, everything Rucks holds for you — your trips, memories, preferences, shares, connections, and search embeddings — is permanently deleted automatically. No request or reminder from you is needed.
• Immediate deletion. If you do not want to wait, you may confirm your email address and delete everything immediately.
• All-or-nothing. Deletion either completes fully or does not run at all — we will tell you if it cannot complete, rather than leaving your data partially removed.
• Connected accounts. Access tokens for connected accounts are revoked with the provider where the provider supports revocation, and our copies are destroyed in every case.
• Backups. Encrypted backups containing your data age out of our backup rotation within days of deletion.

A narrow exception applies where retention of specific records is required by law (for example, security or fraud investigation records).

10. Your Rights

Subject to applicable law, you may:

• access your information;
• correct inaccurate information;
• reject AI-generated inferences;
• request deletion;
• export your Traveler Memory;
• disconnect connected accounts;
• withdraw permissions previously granted.

Most of these rights are built into the product itself: export, correction, rejecting inferences, disconnecting accounts, revoking shares, and deletion (including immediate deletion) are all self-serve features. For anything the product does not cover, or if you cannot access your account, email privacy@rucks.ai. We verify requests using the email address on your account, respond within the time required by your jurisdiction’s law, and never charge for exercising your rights. If someone submits a request on your behalf as your authorized agent, we will verify both their authority and your identity.

European Economic Area and United Kingdom (GDPR / UK GDPR)

If you are in the EEA or the UK, OTB Capital, LLC is the controller of your personal data, and you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection — including objection to the preference profiling described in Section 5 — as well as the right to withdraw consent at any time. Your data is processed in the United States; where required, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses with our service providers. You also have the right to lodge a complaint with your local supervisory authority (or, in the UK, the Information Commissioner’s Office) — though we would appreciate the chance to resolve your concern first at privacy@rucks.ai.

Brazil (LGPD)

If you are in Brazil, you have the rights granted by the Lei Geral de Proteção de Dados, including: confirmation that we process your data; access to it; correction of incomplete, inaccurate, or outdated data; anonymization, blocking, or deletion of unnecessary or excessive data; portability; deletion of data processed with your consent; information about the entities we share data with; information about your option to refuse consent and its consequences; and revocation of consent. You may also petition the Autoridade Nacional de Proteção de Dados (ANPD) regarding your data.

United States State Privacy Laws (CCPA/CPRA and similar)

If you are a resident of California or another US state with a comprehensive privacy law, you have the right to know what personal information we collect (Section 2 describes every category), to access it, to correct it, to delete it, and to receive it in a portable format. Two things you do not need to ask for:

• We do not sell your personal information, and we have not done so in the preceding 12 months.
• We do not share your personal information for cross-context behavioral advertising. Rucks contains no advertising and works with no data brokers, so there is nothing to opt out of — but if the law entitles you to an opt-out, consider it permanently exercised.

We do not use or disclose sensitive personal information for purposes other than providing the services you asked for. We will never discriminate against you — in price, features, or service quality — for exercising any privacy right.

11. Security

We implement commercially reasonable administrative, technical, and organizational safeguards to protect your information. These include measures designed to protect against unauthorized access, disclosure, alteration, and destruction.

No security system is perfect.

12. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate legal safeguards for international transfers.

13. Children’s Privacy

Rucks is not intended for children under the applicable minimum age required to use our services. We do not knowingly collect personal information from children. Family sharing is available only between adults — there are no child accounts and no sharing with minors.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice through the Platform or by email where appropriate.

15. Contact

Rucks AI
OTB Capital, LLC
1117 State Street
Santa Barbara, California 93101
United States
Email: privacy@rucks.ai
Website: https://rucks.ai