Privacy Policy
This policy explains what information Rudy Works collects through rudyworks.io and our services, how we use it, and the choices you have. We do not sell your personal information.
Who we are
Who runs rudyworks.io, what this policy covers, and how to reach us.
Rudy Works ("Rudy Works," "we," "us") builds workflow automation, intake systems, Jotform integrations, custom Google Workspace apps and websites for businesses. We are based in Phoenix, Arizona, United States. Questions about this policy go to hello@rudyworks.io.
This policy covers our website (rudyworks.io), our stack audit form, our emails, and the information we handle when we provide services. It does not cover third-party websites or services we link to.
Who we are
Who runs rudyworks.io, what this policy covers, and how to reach us.
Rudy Works ("Rudy Works," "we," "us") builds workflow automation, intake systems, Jotform integrations, custom Google Workspace apps and websites for businesses. We are based in Phoenix, Arizona, United States. Questions about this policy go to hello@rudyworks.io.
This policy covers our website (rudyworks.io), our stack audit form, our emails, and the information we handle when we provide services. It does not cover third-party websites or services we link to.
Information we collect
What you give us, what the site collects automatically, and client data we handle.
Information you give us
- Contact details: name, company, email address, phone number.
- Stack audit answers: business type, number of Google Workspace users, tools you pay for, approximate monthly spend, priorities and any notes you write.
- Booking details when you schedule a call, and anything you send us by email.
- Business and billing details when you become a client, such as billing contact, invoices and payment records. Card and bank details are handled by our payment processor, not stored by us.
Information collected automatically
- When you visit rudyworks.io, our website host (Wix) and the tools it uses may collect device and browser information, IP address, pages visited, referring site and similar usage data, using cookies and similar technologies.
- Our pages load fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads.
Client data we handle while providing services When we build or support apps for a client, we may access information stored in that client's Google Workspace, Jotform account or other systems (for example customer lists, form submissions, documents and schedules). That information belongs to our client. See "Client data" below.
How we use information
Answering your request, delivering services, security and legal needs.
- To respond to your request, prepare your stack snapshot and audit, and schedule calls.
- To provide, maintain, support and improve our services.
- To send service messages, invoices and, where allowed, occasional updates about our services. You can opt out of marketing emails at any time.
- To keep our website and services secure, prevent fraud and abuse, and fix problems.
- To comply with law, enforce our Terms, and protect our rights and the rights of others.
Legal bases (visitors in the EEA, UK and Switzerland)
The legal grounds we rely on where EU and UK privacy laws apply.
Where these laws apply, we rely on: your consent (for example, when you submit the stack audit form); our legitimate interests in running and improving our business and responding to inquiries; performance of a contract with you or your company; and compliance with legal obligations.
How we share information
Only with service providers, at your direction, or when the law requires. Never sold.
We share information only as described here:
- Service providers that run parts of our business for us, under confidentiality obligations: website hosting (Wix), Google (Google Workspace, Google Apps Script and Google Sheets, where we store stack audit requests), Proton (email and calendar booking), Jotform (for clients who use it), payment processors, and accounting and professional advisers.
- At your direction, for example when you ask us to connect one of your systems to another.
- For legal reasons, when required by law or to protect rights, safety and security.
- In a business transfer, such as a merger, acquisition or sale of assets, subject to this policy.
We do not sell personal information and we do not share it for cross-context behavioral advertising.
Client data
Your business controls its data. We act only on your instructions.
When we provide services, our client (the business) controls its data and decides how it is used. We act as a service provider on the client's behalf and:
- use client data only to deliver the services the client requested;
- keep client data in the client's own accounts wherever possible, rather than copying it to our systems;
- access client systems only with permissions the client grants, and remove our access when an engagement ends;
- do not sell client data or use it to market to the client's customers.
Individuals whose information is stored by one of our clients should contact that business directly with privacy requests. We will help our clients respond.
Google user data
How our apps handle Google account data under Google’s Limited Use rules.
Some apps we build use Google APIs or Google Apps Script to read or change data in a Google account. When they do:
- Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We request only the access an app needs to do what the user or client asked it to do.
- We use Google user data only to provide or improve that user-facing feature, not for advertising.
- We do not transfer Google user data to others except as needed to provide the feature, for security, to comply with law, or with the user's consent.
- We do not use Google Workspace data to develop, improve or train generalized artificial intelligence or machine learning models.
- People at Rudy Works do not read Google user data unless the user or client gives permission, it is needed for security or to comply with law, or it is aggregated and anonymized for internal operations.
Health and other sensitive information
Please don’t send it. Health data only under a signed agreement.
Please do not send health information, payment card numbers, Social Security numbers or other sensitive information through our website or by email. Rudy Works is not a HIPAA covered entity. We handle protected health information only when a medical client has signed a written business associate agreement with us, and only inside the client's own compliant systems.
Cookies and your choices
Cookies our website host uses, and how to control them.
Our website host uses cookies to run the site and measure traffic. You can block or delete cookies in your browser settings; some site features may not work without them. Where required by law, we honor browser opt-out signals such as Global Privacy Control. Our site does not respond to "Do Not Track" signals because there is no common standard for them.
How long we keep information
Inquiries up to 24 months; client records up to 7 years.
- Stack audit requests and inquiries from people who do not become clients: up to 24 months after our last contact, then deleted.
- Client records, contracts and invoices: for the length of the relationship and up to 7 years after, for tax and legal purposes.
- Client data inside client systems: under the client's control. We remove our copies and access when the engagement ends, unless the law requires us to keep something.
Security
The safeguards we use, and what happens if something goes wrong.
We use reasonable safeguards, including account-level access controls, two-step verification on our business accounts, and least-privilege access to client systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as the law requires.
Your privacy rights
See, correct or delete your information, and how to ask.
Depending on where you live, you may have the right to:
- know what personal information we have about you and get a copy;
- correct inaccurate information;
- delete your information;
- opt out of marketing emails and, where applicable, of the sale or sharing of personal information (we do neither), or of targeted advertising and profiling;
- appeal our decision on your request.
Residents of California and other U.S. states with consumer privacy laws, and people in the EEA, UK and Switzerland, have these rights under their local laws. To make a request, email hello@rudyworks.io with "Privacy request" in the subject. We will verify your request using information we already have and respond within the time the law requires (usually 30 to 45 days). You may use an authorized agent. We will not discriminate against you for using your rights. If we deny your request, you can appeal by replying to our decision; if you remain unsatisfied you may contact your state attorney general or local data protection authority.
Children
Our site is for businesses and not directed to children under 16.
Our website and services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.
International visitors
We’re based in the United States and process data here.
We are based in the United States, and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers.
Changes to this policy
How we update this policy and let you know.
We may update this policy from time to time. We will post the new version here with a new effective date, and if the changes are significant we will give additional notice, such as an email to clients.
Contact us
hello@rudyworks.io
Rudy Works · Phoenix, Arizona · hello@rudyworks.io