Privacy

We store the email address you give us, and the date you joined. We use it to let you know when your access is ready and to send you a confirmation now. We don't add you to a mailing list or share your address with anyone to market to you.

With your sign-up we also record where you came from, when that is available: the campaign tags in the link you followed (such as utm_source), and the name of the website that sent you (for example www.linkedin.com, never the full page address). It tells us which channels bring people to Ripple Studio. It is saved only with your sign-up, not in your browser.

We store your name, email address and sign-in details, the projects you create or are invited to, and everything you put into them, including any cover pictures. We also store the folders you file projects into, which only you can see. We use this to run the service for you and your collaborators. We keep a log of significant account and project actions, such as sign-ins, invitations and deletions, to keep accounts secure.

The public pages set no cookies. We count visits with Vercel Web Analytics, which uses no cookies and doesn't identify you or follow you across sites. We don't use Google Analytics or any advertising tags.

When you sign in, we set the cookies needed to keep you signed in. The app also keeps a few display preferences, like which panels you had open, in your browser's local storage.

So that a lost connection or a closed tab doesn't lose your work, the app also keeps any changes to your projects that haven't reached our servers yet in your browser's storage. It sends them, under your account only, as soon as it can (from a closed tab, the next time you open a project) and removes each one once it arrives. Any still waiting after 7 days are removed the next time a project is opened in that browser. Signing out tries to send them first but doesn't remove any that are left; deleting your account removes them from the browser you confirm it in.

All of these are needed for the service to work, so we don't ask for consent to them.

These companies process data for us, only to provide their part of the service:

• Supabase hosts our database and handles sign-in.
• Vercel hosts the website and provides the cookieless visit counts.
• Resend sends our emails.
• Sentry receives error reports when something breaks, set up not to include personal details.
• Google only if you choose to sign in with your Google account.

Some of these providers may store data outside the UK and EU.

• Your waitlist entry stays until you ask us to remove it or you delete your account.
• Your account and projects stay until you delete them. You can delete your account yourself in Account settings, or from the waitlist page while you wait for access: we email you a link to confirm it.
• Deleted project items are removed for good after 30 days.
• The security log is kept for 12 months.
• Unused project invitations are removed after 14 days.
• Links to confirm deleting your account work for an hour and are removed after a day.

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it. Email studio@ripplecolab.com and we'll reply within one month. To leave the waitlist, send us the address you signed up with.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) in the UK, or to the data protection authority where you live.