Privacy Policy

Who we are

RIPE is operated by Lillian Field, an individual based in North Carolina, United States (referred to here as RIPE, we, or us). For the EU and UK General Data Protection Regulation (GDPR), we are the data controller of the personal data described here. For the California Consumer Privacy Act (CCPA), we act as a business. You can reach us about anything in this policy at hellolillyfield@gmail.com.

Who this policy covers

This policy covers two groups of people. First, our customers: the people who create an account and pay for RIPE. Second, business prospects: people at other companies whose professional information we process so our customers can research and contact them. Prospects are not our customers and have not signed up for RIPE. We explain below what we do with each group and how anyone in either group can exercise their rights, including how a prospect can ask to be removed.

Information we collect from customers

When you use RIPE as a customer, we collect your work email address, a description of what you sell and who your buyers are, the landing page or page version you arrived on, and campaign details such as a referral source and UTM tags. We also record simple first-party product events, such as a page view, a button click, when a form is started, and when a request succeeds. These events use an anonymous browser identifier, not your email address, and we use them only to understand and improve how the product is used.

Information we process about business prospects

To power our research features, we process information about business prospects and their companies. About companies, this includes details such as company name, website, industry, size, and public product or hiring information. About individuals in a professional capacity, this includes name, job title, employer, and work email address. We do not seek out special-category data such as health, race, religion, or political views, and we do not knowingly process the data of children. Prospects are not customers of RIPE. We process this information so our customers can decide whether a company and a role are a relevant business contact for what they sell.

Where prospect information comes from

We obtain prospect information from two kinds of source. First, publicly available sources, including company websites, public job postings, news articles, regulatory and corporate filings, product pages, public app-store reviews, and professional networking profiles such as LinkedIn. Second, third-party business-data providers who supply business contact and company information. We combine and structure this information so it is useful for business-to-business research and outreach.

How and why we use information

We use customer information to provide, secure, and improve RIPE, to communicate with you about your account, and to take payment. We use prospect information to build company and contact research briefs, and to help our customers draft business outreach. We use AI providers to generate these briefs and draft emails. We do not sell prospect information as a standalone list, and we do not use prospect information for any purpose that is unrelated to business-to-business sales research.

Legal bases under the GDPR

For customer data, our legal bases are the performance of our contract with you, to provide the service and take payment, and our legitimate interests in securing and improving the product. Where the law requires it, we rely on your consent, for example for non-essential analytics.

For prospect data, our legal basis is our legitimate interests and the legitimate interests of our customers under Article 6(1)(f) of the GDPR, namely identifying and reaching relevant business contacts for business-to-business sales. We have weighed these interests against the rights and reasonable expectations of the people whose data we process. We limit ourselves to professional, business-context information, we do not process special-category data, and we give every person a clear and easy way to object and be removed. You can ask us for a summary of this assessment at hellolillyfield@gmail.com.

AI processing

We use third-party AI providers to generate research briefs and to draft suggested outreach emails from the information described above. These outputs are drafts for a human customer to review, edit, and decide whether to send. We do not use AI to make automated decisions that produce legal or similarly significant effects about any prospect. We use our AI providers under their business terms and limit what we send them to what is needed for these tasks.

Who we share information with

We do not sell your personal information for money. We share information with a limited set of service providers who process it on our behalf under contract: Vercel for website and application hosting, AI providers for generating briefs and draft emails, business-data providers for supplying and enriching company and contact data, Paddle as our payment processor and Merchant of Record, and Resend for sending our notification and transactional emails. Each of these may use the information only to provide services to us.

Payments

Payments are handled by Paddle, which acts as the Merchant of Record for your subscription. When you pay, Paddle collects and processes your payment and billing information under its own privacy policy and is an independent controller of that data. We receive limited information from Paddle, such as confirmation of payment and your billing country, and we do not store full card details.

International transfers

We are based in the United States, and our service providers may process data in the United States and other countries. Where we process the personal data of people in the EU, the UK, or Switzerland, these are international transfers. We rely on the Standard Contractual Clauses approved by the European Commission, along with the UK Addendum and Swiss equivalents where relevant, or on another lawful transfer mechanism offered by our providers, to protect that data.

How long we keep information

We keep customer account data for as long as you have an account, and for a reasonable period afterwards to meet legal, tax, and security obligations. We keep prospect information only for as long as it is useful and accurate for business research, and we review and refresh it from time to time. If a prospect asks to be removed, we delete their information and keep only a minimal record of the request so that we do not add them again.

Security

We use reasonable technical and organizational measures to protect personal data, including access controls, encryption in transit, and vetted service providers. No system is perfectly secure, but we work to protect the information we hold and to limit who can access it.

Your rights

If you are in the EU or UK, you have the right to access the personal data we hold about you, to correct it, to have it erased, to restrict or object to our processing, and to receive a copy of the data you gave us. Because we process prospect data on the basis of legitimate interests, you have the right to object at any time. If you object to us using your data for outreach or research, we will stop and remove you. This is an absolute right for direct marketing, and we do not weigh it against our own interests. You also have the right to complain to your local data protection authority.

If you are a California resident, you have the right to know what personal information we have collected about you and its sources, to delete it, to correct it, and to opt out of any sale or sharing of it. You also have the right not to be treated differently for exercising these rights. Privacy laws define selling and sharing broadly, so to be safe you can ask us not to sell or share your personal information. To make a request, email hellolillyfield@gmail.com. We will verify your request using the information you provide and respond within the time the law allows. You may use an authorized agent to make a request for you.

How a prospect can be removed

If you are a business prospect and you do not have a RIPE account, you can still exercise all of these rights. Email hellolillyfield@gmail.com with the email address, or the name and company, we may hold, and ask us to show you what we have, correct it, or remove you. We will remove you from our prospect data and keep only a minimal suppression record so that you are not added again. We do not charge for this, and we do not require you to create an account.

Changes and contact

We may update this policy, and we will change the date at the top when we do. For any question, request, or objection, including a request to be removed from our prospect data, contact hellolillyfield@gmail.com. See also our Terms of Service and Refund Policy.