Ripple Pro privacy policy

If you're a technician, start with Location and Keeping and deleting. If you're on an HOA board, see Board portal.

Who we are

Ripple Pro is provided by Ripple Ponds LLC ("Ripple," "we," "us"). You can reach us about anything in this policy at support@rippleponds.com.

Our role and your company's role

We sell Ripple Pro to businesses, mainly lake and pond management companies (each a "company"). The company chooses who on its team uses Ripple Pro and what they record. The records its team creates, and the information it enters about its clients, are "company data," and they belong to the company. We provide the service and handle company data on the company's behalf, as its service provider. Our agreement with each company governs how we handle its company data wherever it differs from this policy.

Some words used below: clients are the HOAs, communities and properties a company services, and each one is an account in Ripple Pro (the app's Accounts screen lists them). A company's workspace is its space in our cloud service, where synced records are stored and where the dashboard reads them; the app calls this the company account. Your login is your own sign-in.

We also use some information for our own purposes. This is the complete list:

• keeping sign-in secure, and running, protecting and supporting the service;
• product analytics and crash reports;
• measuring how accurate our AI features are, by comparing AI diagnoses with the feedback and corrections technicians give;
• running our website, and using beta requests sent through it to reply and to set up and run the beta (see Our website);
• creating aggregated, de-identified data (described below).

Each company is responsible for giving its team members and clients any notices, and getting any consents, that the law requires for the information it records in Ripple Pro, including records of where and when its team members work.

What this policy covers

This policy covers the Ripple Pro mobile app, the Ripple Pro manager dashboard on the web, the board portal pages a company can share with its clients, and our website, pro.rippleponds.com. It applies to:

• the company's team members who use Ripple Pro;
• the company's clients whose details appear in it, such as HOA board members and property managers;
• anyone who views a board portal;
• people who visit our website or use its beta-request form (see Our website);
• people who appear in the dashboard's prospecting results, such as property owners and business contacts (see Prospecting).

Our consumer app for pond owners, Ripple, has its own privacy policy. Each company also has its own privacy practices for the information it collects from its employees and clients; ask the company about those.

Information we collect

Login and team information

• Your name, work email address, role (admin, manager or technician) and company.
• Your password. Our sign-in provider stores it in hashed form, and the Ripple Pro app doesn't store it on your phone.
• Sign-in records, such as when you last signed in, and invitation records showing who was invited, by whom and when.
• Company profile details the company enters: its name, contact email and phone; the name, title and license number of the person who reviews reports; and a list of applicators with their names and license numbers.

Field records

Technicians and managers create these as they work. Visits, treatments, water tests and corrections are linked to the team member who created them, and each account is linked to the technician it's assigned to.

• Accounts and sites: account names, service schedules and contract details, the account manager's name, pond names, addresses and map coordinates, outlines of ponds and community areas, size and depth measurements (including where each depth reading was taken), equipment serial numbers, and notes about a pond's history.
• Service visits: the date and time, photos, the AI diagnosis and score, technician notes, readings such as water temperature, dissolved oxygen and clarity, the weather at the time, and the visit's GPS location (see Location).
• Treatments: the product and its EPA registration number, the amount and area treated, when it was applied, the weather conditions, notes, the outcome, the applicator's name and license number, and the treatment's GPS location.
• Water tests: pH, alkalinity, hardness, phosphorus, ammonia, nitrate, dissolved oxygen, temperature, Secchi depth and notes.
• Other records: corrections a technician makes to an AI diagnosis (with an optional short note), service suggestions generated from a pond's records, and depth or sonar survey data.
• Co-pilot chats: questions you ask the AI co-pilot and its answers. These stay on your phone and are sent to OpenAI with each new message (see AI processing). They aren't synced to the company's workspace.

Information about the company's clients

• A company can enter details about its clients, such as an HOA's or property's name, a contact person's name, phone number and email, notes, and site addresses. The company is responsible for having the right to give us this information.
• Pond photos can incidentally show people, homes or vehicles. Ripple Pro doesn't blur or filter photos.

Device and usage information

• Install ID: a random identifier the app creates when it's first used. Our AI server uses it to limit how often one device can call the AI features. The app also uses it to back up its encryption key (see Security).
• IP address: every online service receives your IP address when your phone or browser connects to it. Our AI server uses it to limit request rates.
• Product analytics (PostHog): the screens you open and the actions you take, with details such as a diagnosis result or an error message. Examples are completing a scan, agreeing or disagreeing with a diagnosis, and a sync succeeding or failing. While you're signed in, these events are linked to your user ID, your company ID and your role, and events recorded on the phone before you sign in are linked to you once you do. PostHog's software may also record device details such as model, operating system, app version, language and time zone. PostHog receives your IP address and may use it to estimate your approximate location, such as your city or region.
• Crash and error reports (Sentry): technical details when the app crashes or hits an error, such as the error itself, the device and app version, and recent app activity. Sentry also receives performance data from a sample of sessions. We don't attach your name or email to these reports, but they can include the web addresses the app was loading, which may contain IDs or a pond's coordinates.
• App updates (Expo): when the app checks for updates, it sends its version, its platform (iPhone or Android), which update track it's on, and a random ID for the update check.
• Dashboard and board portal: the dashboard uses cookies to keep you signed in and doesn't use advertising cookies. Vercel Web Analytics counts visits to the dashboard and to board portal pages, and may record which pages are visited, with basic browser and device information. Error reports from the dashboard and board portal, including the address of the page, may be sent to Sentry. We remove the private code in board portal links before page addresses are sent to either service. Our hosting providers keep standard request logs, such as IP address, browser type and the page requested.
• Support emails: when you send feedback from the app, your email app opens a message pre-filled with the app version and your phone's operating system and version. We receive whatever you send.

What Ripple Pro doesn't collect

• Audio. Ripple Pro doesn't use the microphone.
• Location in the background. Ripple Pro uses location only while the app is open.
• Biometric data. Face ID, Touch ID and fingerprint checks happen on your phone, and Ripple Pro only learns whether the check succeeded.
• A push-notification token. Visit reminders are scheduled on your phone. They can show a client's name on the lock screen.

Our website (pro.rippleponds.com)

Our website describes Ripple Pro and takes requests to join the beta.

• Beta-request form. The form asks for your name, work email address, company and crew size, and, if you choose, which communities or accounts you'd like mapped first. When you send it, your browser sends what you entered directly to Formspree, a form-processing service, which passes it to us. Like any online service, Formspree also receives your IP address. We use what you send to reply to you, to set up and run the beta with your company, and, if you list communities or accounts, to map those ponds in Ripple Pro before our first call. Ponds we load for your company become company data, covered by the rest of this policy.
• Fonts. Your browser loads the website's fonts from Google Fonts, so Google receives your IP address and browser type. Google handles these requests under its own terms.
• Hosting. Netlify hosts the website and keeps standard request logs, such as IP address, browser type and the page requested. Netlify may also show a small "Powered by Netlify" badge. It doesn't set cookies. If you hide it, your browser remembers that on your device, and its links take you to Netlify's own site.
• No cookies or analytics. The website doesn't set cookies, and it doesn't use analytics, advertising or other tracking tools.
• Dashboard demo. The "See it in action" link opens an interactive demo of the Ripple Pro manager dashboard, with sample data and no sign-in. The demo is part of the dashboard, so what this policy says about the dashboard applies there, including Vercel Web Analytics, error reports to Sentry and satellite imagery from Esri.

We don't sell what you send, and we don't share it for targeted advertising. We keep beta requests (in Formspree and in our email), and any ponds we load for a company that hasn't joined, only as long as we need them to talk with you about Ripple Pro and to set up and run the beta. If you've sent a beta request and want to see, correct or delete it, email support@rippleponds.com.

Location

• Proof of service. When a technician logs a service visit, a treatment or a batch application, the app records the phone's GPS location: latitude, longitude, an accuracy estimate and the time. This shows the work was done on site and supports state pesticide application records. The location is saved with the record and linked to the technician who created it. If the phone is set to share only an approximate location, the recorded location is approximate.
• Who sees it. The company's managers and admins can see it, and so can technicians assigned to the same account. It can appear in reports and exports the company gives its clients (see Sharing).
• Placing ponds and depth readings. When you set up a pond, the app may start from your current position, and you can also drop a depth reading where you're standing. If you keep that position, it's saved as the pond's location or the reading's location. A pond's saved location syncs to the company's workspace and is sent with co-pilot chats about that pond (see AI processing).
• Maps, routes and weather. While the app is open, it can use your current location to show you on maps, find nearby sites, order today's route and load local weather. Apart from the cases above, Ripple Pro doesn't add this live location to your records or send it to our servers. Your phone's map service (Apple Maps on iPhone, Google Maps on Android) displays your position under its own terms, and our weather provider receives the location it's forecasting for.
• Your choice. Location access is optional, and you can change it at any time in your phone's settings. If it's off, or no location is available, visits and treatments are saved without GPS proof of service.

How we use information

• To provide Ripple Pro: sync records between phones and the dashboard, download the company's records onto team members' phones (see Sharing), restore records onto a lost or replaced phone, show managers their team's work, and schedule visits and reminders.
• For AI features: diagnose pond conditions from photos and answer co-pilot questions. Corrections your team makes are sent along with later AI scans of the same pond so the AI can take them into account.
• For weather and watershed context: fetch forecasts for treatment timing, record the conditions at each visit and treatment, and look up the watershed, soil and land use around a pond.
• For reports and compliance: produce service reports, the board portal and exports of application records.
• To communicate with you: send invitations and password-reset emails, and answer support requests.
• To answer beta requests: reply, set up and run the beta, and map the ponds you list (see Our website).
• For security: verify sign-ins, keep each company's data separate, limit misuse of the AI features, and investigate problems.
• To improve Ripple Pro: understand how features are used, fix crashes and errors, and measure how accurate AI diagnoses are by comparing them with technicians' feedback and corrections.
• To meet legal obligations and enforce our agreements.

We don't use company data to advertise to anyone, and we don't sell it.

AI processing

Ripple Pro uses OpenAI's API for its AI features. The app sends each request over an encrypted connection to our AI server, which passes it to OpenAI and returns the result. This happens only when someone runs a scan, sends a co-pilot message or uses a guided assessment. A visit can be logged without a photo or a scan.

• Visit scans send up to five photos, the technician's note for the visit (up to 500 characters), the previous visit's main issue and score, how many days ago it was, and up to three recent corrections for that pond with their short notes. They don't send the pond's name, address or location. Water test results and watershed information go to our server, which uses them to adjust the score; they aren't sent to OpenAI.
• Co-pilot chats send the recent conversation (up to the last 12 messages) and information about the pond: its name, its saved location (usually its map coordinates or a street address), its state, size and features, main concern and history summary (which can include its latest water test). They also send its latest diagnosis and product information.
• Guided pond assessments (older screens, where available) send photos, answers to follow-up questions and a pond summary that can include the pond's name, state, climate zone, size and history. They don't send the pond's street address or map coordinates.

We don't send your name, email address, user ID or company to OpenAI. They will reach OpenAI only if someone types them into a note or chat message.

Our AI server doesn't save photos, notes or chat messages. It holds some results in memory for about 20 minutes so the app can collect them. The diagnosis that comes back is saved with the visit in the company's workspace.

Under OpenAI's API terms, data sent through the API isn't used to train OpenAI's models unless the customer opts in. OpenAI may keep API data for a limited time to monitor for abuse. AI results can be wrong, so technicians review each diagnosis and can correct it.

Aggregated, de-identified data

Each company owns its company data. We own the Ripple Pro platform, our models, and aggregated, de-identified data derived from use of the service.

We may create aggregated, de-identified data from company data and from how the service is used. One example is how often AI diagnoses are confirmed or corrected. This data doesn't identify a company, its team members, its clients or a specific property. We keep and use it only in de-identified form, and we won't try to re-identify it. We may use it to operate, improve and develop the platform and our models. If we share it with anyone else, we'll require them in writing to keep it de-identified and not to try to re-identify it.

We don't currently train AI models on company data. We won't use photos or records that identify a company, its clients or a property to train our models unless the company has agreed to that in its agreement with us, and we'll update this policy before we do.

How information is shared

Within your company

• Managers and admins can see all of the company's records, including the GPS location of each visit and treatment. They can also see the team list, with each member's email address and role. When a manager or admin signs in on a phone that doesn't yet hold Ripple Pro records, the app downloads the company's records to that phone, including photos and GPS locations.
• Technicians can see the accounts assigned to them and those accounts' sites and records. That includes records teammates created there, with their GPS locations and applicator details. The app downloads these to the technician's phone automatically, including accounts newly assigned to them. Technicians can also see their teammates' names and roles, and the company profile, including the applicator list with license numbers.
• Visit photos stored in the company's workspace are available to every signed-in member of the company, not only to those assigned to that account.
• Before a phone is given to someone else, use Reset app data (see Keeping and deleting).

With the company's clients, at the company's direction

• Reports and exports. Service reports can include pond photos, diagnoses, technicians' visit notes, treatment details, applicator names and license numbers, the reviewer's name and license number, and the company's contact details. Visit exports include technicians' notes, and some reports and exports include the GPS coordinates recorded for each application. When a technician shares a report, contract or site from the app, it goes wherever they send it, such as email, text message or AirDrop, and leaves Ripple's control.
• Board portal. A manager can create a link to a page for one account. Anyone with the link can view the page without signing in. It shows the account's name, the company's name, pond names, a status rating for each pond (such as on track or being managed) with a count of each, the latest photo of each pond, when each pond was last serviced, a word and a small chart showing whether the pond is improving, the main issue found, and whether a possible algae advisory applies. It also shows the last treatment date, the next service date, and whether the visit was GPS-verified on site. It doesn't show technician names, coordinates, products, costs, contact details, notes or numeric scores. When the link is shared in a messaging app, its preview can show the account's name and the company's name. The link doesn't expire. A manager can turn it off at any time with "Stop sharing," and deleting the account in the dashboard turns it off too. Because anyone with the link can see the page, share it only with people who should.

With service providers

These companies process information for us so we can run Ripple Pro. Our written agreements with them require them to use the information only to provide their services to us and to protect it at least as well as this policy describes.

• Supabase: database, sign-in and photo storage for company workspaces.
• Railway: hosts our AI server.
• OpenAI: AI photo diagnosis and co-pilot answers.
• Vercel: hosts the manager dashboard and board portal, and provides web analytics for them.
• PostHog: product analytics for the mobile app.
• Sentry: crash and error reports for the app, the dashboard and the board portal.
• Expo: delivers app updates.
• Resend (which sends through Amazon Web Services): invitation and password-reset emails.
• Cloudflare: runs our domain and forwards email sent to our support address.
• Netlify: hosts our website, pro.rippleponds.com.
• Formspree: receives beta requests sent through our website's form and passes them to us.

With map and data services

Some features look up information for a location. These services aren't our service providers and handle requests under their own terms. They receive coordinates, map areas, watershed codes or search text, along with the IP address of the device or server making the request. We don't send them your name or login.

• Open-Meteo provides weather forecasts. Your phone sends it the coordinates of a pond or work area, and it receives your phone's IP address.
• Public OpenStreetMap Overpass servers receive the area a technician outlines when finding ponds inside a community, sent from the phone. Our server also sends them a pond's location to describe nearby land use.
• The U.S. Geological Survey, the U.S. Department of Agriculture's Natural Resources Conservation Service and the U.S. EPA provide watershed, elevation, soil and water-quality information. Our server sends the first two a pond's coordinates, and the EPA receives only a watershed code. These requests come from our server, not your phone.
• Apple and Google provide maps and address search: Apple on iPhone, Google on Android. Addresses you search for, the map locations you view, and the coordinates of new ponds (to look up which state they're in) go to them.
• Esri provides satellite imagery for dashboard maps. Your browser requests the imagery for the area you're viewing.

Links you open

When you tap a link to another service, such as directions in Google Maps, a product page or a state agency's site, that service receives what's in the link, such as a pond's coordinates. Some product links include a tag that tells the retailer the visit came from our app.

Prospecting tools (web dashboard only; not in the mobile app)

The dashboard can include a tool that helps a company find ponds it doesn't yet service. When a manager runs it, our server looks up:

• mapped ponds in the area, using public OpenStreetMap Overpass servers;
• Florida public property records for each pond found, including the owner's name and mailing address;
• business listings from Google Places and web search results from Brave or Google;
• contact details published on the organization's website;
• published business contacts through Hunter.io, such as names, job titles, email addresses and phone numbers.

Before showing results, the tool drops owners who appear to be individuals. These services receive the names, website addresses and map areas being looked up. Results are shown to the manager who ran the search, and Ripple doesn't save them. If you appear in prospecting results and have a question or request, email support@rippleponds.com.

Other situations

• When the law requires it, or to protect the safety, rights or property of people, our customers or Ripple.
• As part of a merger, acquisition, financing or sale of assets, under commitments consistent with this policy.
• At your company's direction or with your consent.

We don't sell personal information, and we don't share it for cross-context behavioral advertising (also called targeted advertising).

Keeping and deleting information

On your phone

• Records stay on the phone until they're removed. Settings → Reset app data deletes Ripple Pro's records and saved photos from that phone, cancels its reminders and signs it out. It doesn't delete anything from the company's workspace. Exported reports and other temporary files may stay in the phone's cache until the phone clears them.
• Disconnect this device signs the phone out but keeps the records already on it.
• Deleting an account in the app removes it from that phone only; its ponds stay on the phone, listed as unassigned. Nothing is deleted from the company's workspace.
• On iPhone, Ripple Pro data may be included in iCloud or computer backups, depending on the phone's settings. On Android, Ripple Pro turns off app-data backup.
• Ripple Pro can't erase a phone remotely. When a team member leaves or a phone changes hands, use Reset app data first. This matters most for managers' and admins' phones, which can hold all of the company's records.

In the company's workspace

• We keep company data until the company deletes it or asks us to delete it, including after the company stops using Ripple Pro, unless our agreement with the company says otherwise. Records aren't deleted automatically.
• Deleting an account in the dashboard removes the account record, including its contact and contract details, and turns off its board portal link. Its ponds and their visit and treatment history are kept and listed as unassigned. A phone that still holds the account uploads it again the next time it syncs, so also delete the account in the app on each phone that holds it, or reset those phones.
• To delete other records, photos, or all of a company's data, a company admin or manager can email support@rippleponds.com. We'll confirm the request with the company before deleting anything. Phones upload the records they hold each time they sync, so we'll work with the company to reset or sign out those phones before we delete.
• Some records, such as pesticide application records, may have to be kept for a period set by law. The company is responsible for those obligations, and we may keep information when the law requires us to.
• If our providers keep backups, deleted information may remain in them until the backups expire.

When a team member leaves

A manager or admin can remove a team member, which stops them signing in. The records they created stay with the company, because those records belong to the company. That includes their name and license number on treatment records. Their login is kept in a disabled state until the company or the person asks us to delete it (see below). Records already on their phone stay there until they use Reset app data or delete the app.

Deleting your Ripple Pro login

To ask Ripple Ponds LLC to delete your Ripple Pro login, email support@rippleponds.com from your work email address with the subject "Delete my Ripple Pro login." We'll confirm the request with you and with your company's admin, and complete it within 45 days. We'll delete:

• your login, including your email address and password record;
• the backup of your phone's encryption key;
• product analytics linked to your user ID, and any crash reports linked to you.

Records you created for your company, such as visits, treatments and water tests, belong to the company and stay in its workspace, including your name and license number on application records. Your company can ask us to delete them. Copies in our providers' backups are removed when those backups expire. Ripple Pro data on your phone is removed when you use Reset app data or delete the app.

Our AI server and service providers

• Our AI server keeps no photos, notes or chat messages. It keeps:
  • results in memory for about 20 minutes;
  • watershed lookups, saved by a location rounded to about 110 meters (about one city block), for up to 30 days;
  • rate-limit records (IP address and a coded, or hashed, version of the install ID) for up to an hour.
  Its application logs record technical details such as timings, sizes and errors, not photos, notes, chat text or locations. Our hosting provider also keeps its own request logs.
• Each phone's backed-up encryption key (see Security) is kept until the technician's login is deleted.
• OpenAI, PostHog, Sentry and our other providers keep information for the periods set by their terms and our settings with them.

Security

• On the phone: where the phone supports it, the most sensitive records are encrypted with a key held in the phone's secure storage (the Keychain on iPhone, the Keystore on Android). These include accounts, sites, visit and treatment logs, water tests and the company profile. If the phone's secure storage isn't working, these records are kept without this extra encryption. Other app data is protected by the phone's own security, such as its passcode, but not by this extra encryption. That includes photos saved on the phone, scans waiting to be sent, co-pilot chats, diagnosis corrections and the sign-in session.
• Key backup: so records can be recovered if a phone's secure storage is lost, the app backs up its encryption key to the company's workspace. Database rules limit access to the technician it belongs to, and authorized Ripple personnel can also access it.
• App lock: if the phone has a passcode, Face ID or a fingerprint set up, Ripple Pro asks for it when it opens or returns after a short break. It's on by default and can be turned off in Settings.
• In transit: the app and dashboard connect to our servers and providers over encrypted connections (HTTPS).
• Access controls: database rules keep each company's data separate, and roles limit what technicians can see, except visit photos as described above. Authorized Ripple personnel can access company data when needed to run, support or secure the service.

No system is perfectly secure. If you think your login or a phone has been compromised, tell your company's admin or a manager and email support@rippleponds.com.

Your choices and rights

Permissions. You can allow or deny camera, photo library, location, notification and Face ID or fingerprint access at any time in your phone's settings. Without location access, visits and treatments are saved without GPS proof of service.

Analytics and AI. Product analytics is part of how we run Ripple Pro, and the app doesn't have a setting to turn it off. You can ask us to delete analytics linked to your user ID. Information goes to OpenAI only when someone runs a scan, sends a co-pilot message or uses a guided assessment, and visits can be logged without a photo.

Team members. The company controls its records, so the quickest way to see, correct or delete information in Ripple Pro is to ask your company's admin or a manager. You can also email us, and we'll work with your company to respond. For information we use for our own purposes, such as analytics linked to your user ID, you can ask us directly. To delete your login, see Deleting your Ripple Pro login.

Admins and managers. Admins and managers can download each account's application, visit and water-test records as spreadsheets (CSV) from the dashboard. They can also delete accounts as described above. For other access, export or deletion requests, email us.

The company's clients and others. If a company that services your pond has entered information about you, or you appear in a photo, contact that company. If you contact us, we'll pass your request to the company and help it respond.

Beta requesters. A beta request isn't company data, so email support@rippleponds.com to see, correct or delete yours, and we'll handle it directly.

U.S. state privacy disclosures

Depending on where you live, state privacy laws may give you the rights below. This section also describes the personal information we've collected in the past 12 months, in the categories those laws use.

• Identifiers: name, work email address, user ID, install ID, device identifiers and IP address. From you, your company and your device. Used to provide, secure and improve Ripple Pro. Disclosed to your company and our service providers. If you send a beta request through our website, your name and work email address come directly from you, are used to respond to you and run the beta, and are disclosed to Formspree as our service provider. Our website's font requests also send your IP address to Google (see Our website).
• Contact and customer records: names, phone numbers, email addresses and addresses of clients' contacts, and the addresses of their sites. From the company. Used to provide Ripple Pro. Disclosed to the company, our service providers and, at the company's direction, its clients.
• Professional or employment information: role, company, applicator license numbers and the work records you create. From you and your company. Used to provide Ripple Pro and its reports. Disclosed to your company, our service providers and, at the company's direction, its clients. If you send a beta request through our website, your company, crew size and the communities or accounts you list come directly from you, are used to respond to you and run the beta, and are disclosed to Formspree as our service provider.
• Geolocation: the GPS location recorded with visits and treatments, pond locations, and approximate location estimated from your IP address. From your phone. Used to provide proof of service, maps, weather and analytics. Disclosed to your company, our service providers, the map and data services described above and, through reports, the company's clients.
• Photos and other sensory information: pond photos, which can show people. From your phone. Used for AI diagnosis and records. Disclosed to your company, OpenAI and our other service providers and, through reports and the board portal, the company's clients.
• Internet or app activity: app and dashboard usage, crash and error data, and our website's request logs. From your device or browser. Used to run and improve Ripple Pro. Disclosed to our service providers.
• Commercial information: service schedules and contract details between the company and its clients. From the company. Used to provide Ripple Pro. Disclosed to the company and our service providers.

Sensitive personal information. We collect precise geolocation (the GPS location recorded with visits and treatments) and login credentials (your email address and password, which our sign-in provider stores in hashed form). We use them only to provide Ripple Pro, keep it secure and for other purposes the law permits, not to infer characteristics about you. Because of that, we don't offer a separate option to limit their use.

No sale or sharing. We don't sell personal information or share it for cross-context behavioral advertising, and we haven't done so in the past 12 months. We don't knowingly sell or share the personal information of anyone under 16.

Your rights. You may have the right to know what personal information we hold about you, and to access, correct or delete it. You may also have the right to opt out of the sale of personal information or its use for targeted advertising; we don't do either. To make a request, email support@rippleponds.com. We'll need to confirm your identity, and if the request concerns company data we'll pass it to the company. We'll confirm we received your request within 10 business days and respond within 45 days. If we need more time, we'll tell you why and take up to 45 more days. Where the law allows, an authorized agent can make a request for you. We won't treat you differently for using these rights.

Appeals. If we decline your request, you can appeal by replying to our decision with "Appeal" in the subject line. We'll respond within 60 days. If you disagree with the outcome, you can contact your state attorney general.

Global Privacy Control and Do Not Track. Because we don't sell or share personal information, an opt-out preference signal such as Global Privacy Control has nothing to switch off; we treat one as an opt-out request anyway. Our website and the dashboard don't track you across other websites, and we don't use advertising or cross-site tracking tools on them. Neither changes how it works when a browser sends a "Do Not Track" signal.

We review this policy at least once every 12 months.

Children

Ripple Pro is a business tool for adults at work and isn't intended for anyone under 18. We don't knowingly collect personal information from children. If you think a child's information is in Ripple Pro, email us.

Where information is processed

Ripple Pro is offered to businesses in the United States. We and our service providers may store and process information in the United States and in other countries where they operate. Our analytics and crash-report providers store data in the United States.

Changes to this policy

We'll post changes on this page and update the effective date. If a change is material, we'll email each company's admins and show a notice in the app before it takes effect. We won't use information we've already collected in a materially different way without the company's consent, and the individual's consent where the law requires it.

Contact

Ripple Ponds LLC
support@rippleponds.com