Privacy Policy
Effective date: 9 October 2026
Company: Ripple One Ltd (company number SC756500)
Registered office: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, Scotland, G2 1BP
Email: hello@rippleone.ai
1. Introduction
Ripple One Ltd (“Ripple One”, “we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. We are the data controller for personal data collected through rippleone.ai and app.rippleone.ai (together, “the Platform”).
This Privacy Policy explains what personal data we collect, why we use it, who we share it with and what your rights are. It should be read with our Terms & Conditions and Cookie Policy.
2. Data we collect
a. Information you provide
- Account data: your email address, which we use to send you a sign-in link or code, and your account type (business or creative).
- Profile and portfolio data (creatives): information you choose to add, such as your name, skills, experience, location, work samples and links. Depending on your settings, parts of your profile may be visible to businesses and other users of the Platform.
- Business data: company name, contact details, job posts and partner marketplace listings.
- Applications: information you submit when you apply for a job, which is shared with the business that posted it.
- References: if you ask someone to give you a reference, we collect their name, email address and the reference they provide. If you are asked to be a referee, we receive your details from the person who requested it.
- Messages: messages and other communications you send through the Platform or to us.
- Payment data (businesses): payments are processed by Stripe. We receive confirmation of payment, the amount and a customer reference. We do not store full card details.
b. Information we collect automatically
- Device, browser and IP address information, and security logs, to keep the Platform secure.
- If you accept analytics cookies, aggregated usage information such as pages visited and country, through Google Analytics (see our Cookie Policy).
c. Information from third parties
- Payment confirmation and transaction data from Stripe.
- Information about you provided by other users, for example a referee’s reference or details a business includes in a job post.
3. How we use your data and our legal basis
| What we use it for | Legal basis |
|---|---|
| Creating and running your account and sending sign-in emails | Contract |
| Providing profiles, portfolios, job posts, applications, marketplace listings, messaging and references | Contract |
| Taking payments and keeping financial records | Contract; legal obligation |
| Keeping the Platform secure and preventing fraud and abuse | Legitimate interests |
| Responding to your enquiries and providing support | Legitimate interests |
| Understanding how the Platform is used, using analytics | Consent (you can withdraw it at any time) |
| Complying with legal and regulatory obligations | Legal obligation |
We do not currently send marketing emails. If we do in future, we will ask for your consent first and you will be able to unsubscribe at any time. We never sell your personal data.
4. AI features
The Platform includes AI-assisted tools, including an AI Screening Assistant that helps businesses review job applications. When these tools are used, relevant application and profile data is processed by our AI service providers acting on our instructions.
AI outputs are suggestions only. We do not make decisions about you that have a legal or similarly significant effect based solely on automated processing, and businesses using the Platform must not do so either. If you are unhappy with how an application was assessed, contact us at hello@rippleone.ai and ask for a human review.
5. Who we share your data with
- Businesses: if you apply for a job or choose to make your profile visible, relevant information is shared with the business concerned. That business is responsible for its own use of your data in its hiring and collaboration decisions.
- Service providers acting on our instructions: our database, authentication and hosting providers (including Supabase and Lovable), Stripe for payments, Google for analytics, email delivery providers, and AI service providers.
- Professional advisers, regulators and law enforcement where we are required to by law.
- A buyer or successor if we sell or restructure the business, subject to this Policy.
We require our service providers to protect your data and to use it only as we instruct.
6. International transfers
Some of our providers are based outside the UK, including in the United States. Where we transfer personal data outside the UK, we rely on UK adequacy regulations (including the UK–US data bridge where the provider is certified) or on the ICO’s International Data Transfer Agreement or Addendum, together with appropriate safeguards.
7. How long we keep your data
| Data | Retention |
|---|---|
| Account and profile data | While your account is open, then deleted within 90 days of closure |
| Applications and messages | 12 months after the job closes or your account is closed |
| Payment and invoice records | 6 years, to meet tax and accounting requirements |
| Analytics data | Up to 14 months |
| Support emails | 2 years |
You can ask us to close your account and delete your data at any time by emailing hello@rippleone.ai. We may keep limited data where the law requires it.
8. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data in certain circumstances
- Restrict or object to our processing
- Data portability, to receive your data in a portable format
- Withdraw consent at any time, where we rely on consent
- Ask for human review of significant automated decisions (see section 4)
To exercise any of these rights, email hello@rippleone.ai. We will respond within one month.
You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113. We would appreciate the chance to resolve your concern first.
9. Data security
We use measures such as encryption in transit, access controls and row-level security on our database to protect your data. No system is completely secure, so please keep access to the email account you use to sign in secure.
10. Cookies
We use strictly necessary cookies and, with your consent, analytics cookies. See our Cookie Policy for details and how to change your choices.
11. Children’s privacy
The Platform is intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be on this page with an updated effective date, and we will notify account holders by email of any material changes.
13. Contact us
For any questions or requests about this Privacy Policy, email hello@rippleone.ai or write to Ripple One Ltd, Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, Scotland, G2 1BP.