Privacy Policy

1. Data controller

The data controller is RIPLI LTD, a company registered in England and Wales (Company No. 17120779), with its registered office at 128 City Road, London, EC1V 2NX.

Contact: admin@ripli.ai

2. Data we collect

• Account data: Name, email address, and authentication credentials when you create an account.
• Uploaded content: Product images, logos, packaging photos, and other media you upload for AI processing.
• Usage data: Generation history, credit usage, feature interactions, and session analytics.
• Payment data: Processed by Stripe. Ripli does not store your card number, CVV, or full card details on our servers.
• Communications: Emails and support messages you send to us.

3. Lawful bases for processing

• Contract performance: Processing your data to provide the Ripli service, generate outputs, and manage your account.
• Legitimate interest: Analytics, fraud prevention, service improvement, and maintaining platform security.
• Consent: Marketing emails and optional communications. You can withdraw consent at any time.

4. AI processing and your content

Ripli does not use your uploaded content to train AI models. Your images and media are processed solely to generate the outputs you request. Generated outputs are stored in your account and are not shared with other users or used for model training.

AI model providers process your content only to fulfil generation requests and do not retain your data for their own training purposes under our data processing agreements.

5. Third-party processors

• Stripe: Payment processing. See Stripe's privacy policy.
• AI model providers: Image and video generation (including but not limited to services for image generation, video synthesis, and background removal).
• Hosting providers: Cloud infrastructure for serving the platform and storing generated outputs.
• Analytics: Privacy-respecting analytics to understand how the platform is used.

6. International data transfers

Your data may be processed outside the United Kingdom by AI model providers and cloud infrastructure services. Where transfers occur, appropriate safeguards are in place, including standard contractual clauses or adequacy decisions recognised by the UK Government.

7. Data retention

• Account data: Retained while your account is active and for a reasonable period after closure for legal and operational purposes.
• Uploaded content: Retained while your account is active. Deleted upon account closure unless required for legal compliance.
• Generated outputs: Retained while your account is active. Available for download during your subscription period.
• Payment records: Retained as required by UK tax and accounting regulations (typically 6 years).

8. Your rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, commonly used, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request restricted processing in certain circumstances.

To exercise any of these rights, contact us at admin@ripli.ai. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Ripli uses essential cookies required for the platform to function (authentication, session management). We use privacy-respecting analytics that do not require cookie consent under UK regulations. We do not use third-party advertising cookies.

10. Changes to this policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

Contact

For any questions about this privacy policy or your data, contact:
RIPLI LTD
128 City Road, London, EC1V 2NX
admin@ripli.ai