This policy explains what personal information Ripul collects, why, who handles it for us, how long we keep it, and the choices and rights you have. It covers the Ripul apps for iPhone and Mac (including Ripul Host), the Ripul web app, this website and the Ripul Library.
Who we are
Ripul is provided by Digisight Limited, a company registered in England and Wales (company number 14491167), whose registered office is at 2 Infirmary Street, Leeds, LS1 2JP (“Ripul”, “we”, “us”). For the information described here we are the data controller, except where a business uses Ripul to run its own site, as explained below. You can contact us about privacy at support@ripul.io.
Sites that businesses build with Ripul
Businesses use Ripul to build their own websites, booking pages and portals. When you visit or book through one of those sites, that business decides what information it collects and why, and is the controller of it. Ripul hosts and processes that information on the business’s behalf, under its instructions. Please read that business’s own privacy notice, and contact it first with questions about your information. We will help it answer.
What we collect
- Your account. Your name, email address and the sign-in details our authentication provider holds for you, such as a password or a linked Google or Apple account.
- What you create and send. Your conversations with Ripul, the files and images you add, the artefacts, sites, pages and data you make, and the instructions you give the apps.
- Your devices. The names and identifiers of the devices you connect, the information needed to send them notifications, and, if you use the Mac apps, details of the Mac and the folders and tools you allow Ripul to use.
- Connections you set up. Keys and access you give Ripul to other services, such as a booking system or a mailbox. We store these encrypted and use them only for the purposes you approve.
- Payments. Your subscription and payment history. Card details are collected and held by our payment provider, Stripe; we never see or store full card numbers.
- Technical information. Logs our servers keep when the apps connect, such as IP addresses, times, app versions and errors, which we use to run the service, keep it secure and fix problems.
- Messages to us. What you send when you contact support.
How we use it
- To provide Ripul: to run your conversations, carry out the tasks you ask for, keep your work in step across your devices, and host the sites you build.
- To produce AI responses. When you use an AI feature, what you send for that request, which may include messages, files or page content, goes to the AI model provider behind the model being used: Anthropic, OpenAI, Google, xAI or DeepSeek. Each provider processes it under its terms for business customers.
- To take payments, and to keep the records the law requires.
- To keep Ripul secure, prevent misuse and investigate faults.
- To answer you when you contact us, and to tell you about important changes to the service.
We do not sell your personal information. We do not show advertising, and we do not use advertising or tracking cookies. We do not use your content to train AI models.
Google user data
A business can connect its Gmail or Google Workspace mailbox so that its Ripul site can send email from its own address, such as booking confirmations and reminders. When it does:
- Ripul asks Google for permission to send email on the mailbox’s behalf (the
gmail.sendscope), and to know the mailbox’s email address. - Ripul uses that permission only to send the emails the business’s site sends. It cannot read, change or delete any email in the mailbox, and does not try to.
- Ripul stores the address and the access Google grants, encrypted, and nothing else from the account. The content of each email sent is not kept beyond sending it.
- This information is not sold, not used for advertising, not used to train AI models, and not shared except with the providers who host Ripul’s servers. No one at Ripul reads it, except when the business asks us to, for security, or where the law requires.
- The business can withdraw the access at any time, from its site in Ripul or in its Google account at myaccount.google.com/permissions.
Ripul’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Our legal bases
Under UK and EU data protection law we rely on: the contract with you, to provide the service you signed up for; our legitimate interests, to keep Ripul secure, understand faults and improve it, balanced against your rights; your consent, where we ask for it, such as for notifications or connecting another account, which you can withdraw at any time; and legal obligations, such as keeping financial records.
Who handles it for us
We use carefully chosen service providers, each bound by contract to use the information only to provide their service to us:
- Cloudflare: hosting, storage and the delivery of the apps, sites and this website.
- Clerk: sign-in and account security.
- Stripe: payments, including payments made on businesses’ sites.
- AI model providers: Anthropic, OpenAI, Google, xAI and DeepSeek, for the requests sent to their models.
- Apple: notifications to your devices, and app distribution.
- Google: sending email from mailboxes that businesses connect.
When you or a business connect Ripul to another service, such as a booking system, Ripul exchanges information with that service as the connection requires. We may also disclose information where the law requires it, to protect people’s safety or our rights, or as part of a sale or reorganisation of our business, in which case this policy will continue to apply to it.
International transfers
Some of these providers process information outside the UK and the European Economic Area, including in the United States, and DeepSeek in China. Where that happens we rely on adequacy decisions or on the safeguards the law provides, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
How long we keep it
We keep your account and content for as long as your account is open, so that Ripul works as you expect. You can delete conversations and other content at any time. When you close your account we delete or anonymise your information within 30 days, except what we must keep longer by law, such as payment records, and copies in backups, which are overwritten in the normal course. Server logs are kept for 30 days.
Security
Information travels encrypted between your devices and our servers. Keys and access to other services are stored encrypted, with access limited to the systems that need them. No system is perfectly secure, and if a breach affecting your information occurs we will tell you and the authorities as the law requires.
Your rights
You have the right to ask for a copy of your personal information, to have it corrected or deleted, to receive it in a portable form, to object to or restrict how we use it, and to withdraw consent you have given. To use any of these rights, email support@ripul.io. We will answer within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.
Children
Ripul is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
Cookies and storage
The apps and web app keep small amounts of information on your device, such as your sign-in and settings, so that they work. This website sets no cookies of its own. We use no advertising or analytics cookies.
Changes to this policy
We will update this page when our practices change, and change the date at the top. If a change is significant, we will tell you in the apps or by email before it takes effect.