Privacy Policy

How we collect, use, and protect your personal information.

Effective date: 1 July 2026  ·  Last updated: 1 July 2026

Rippld ("we", "our", or "us") is operated by Rippld Technologies Private Limited, a company incorporated in India. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit rippld.in (the "Site") or use the Rippld platform (the "Service").

By using our Site or Service, you agree to the collection and use of information in accordance with this Policy. This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.

1. Who this Policy applies to

This Policy applies to two groups of people:

  • HR managers and company representatives ("Customers") who sign up for and use the Rippld platform to run employee gifting campaigns.
  • Employees ("Recipients") whose details are uploaded by Customers and who receive personalised gift links.

If you are a Recipient, your employer (our Customer) is responsible for how your personal data is shared with us. Please refer to your employer's own privacy notice for details.

2. What personal data we collect

From Customers (HR managers / company representatives)

  • Name and work email address (when you request a demo or contact us)
  • Company name and approximate team size
  • Login email address (when you create an account)
  • Campaign details you enter (occasion, budget, employee list)
  • Usage data: pages visited, features used, timestamps

From Recipients (employees)

  • Name and mobile phone number (provided by your employer when setting up a campaign)
  • Gift selection made via your personalised link
  • Delivery address (only if you select a physical gift)

Automatically collected data

  • IP address, browser type, and device information
  • Pages visited and clicks on the Site
  • Referral source (how you arrived at the Site)

3. How we use your data

  • To provide and operate the Rippld platform
  • To send you a personalised gift link (Recipients only)
  • To respond to demo requests and enquiries
  • To send transactional emails (magic links, campaign confirmations)
  • To track perquisite tax thresholds per employee as required under Indian tax law
  • To improve the Site and Service through aggregated analytics
  • To comply with applicable legal obligations

We do not use your data for advertising, profiling, or sale to third parties.

4. Legal basis for processing

Under the DPDP Act 2023, we process personal data on the following grounds:

  • Consent: when you submit a demo request form or contact form, you consent to us using your details to respond.
  • Contractual necessity: to fulfil our obligations under the agreement with our Customers.
  • Legitimate interests: for security, fraud prevention, and improving our Service.
  • Legal obligation: where required by Indian tax or corporate law.

5. Data sharing

We do not sell your personal data. We share data only in these circumstances:

  • Gift fulfilment partners: for physical gifts, we share the Recipient's name and delivery address with the vendor handling dispatch.
  • Email service provider: we use Resend (resend.com) to deliver transactional emails. Resend processes email addresses on our behalf.
  • Customers: HR managers can see their own employees' gift selections and campaign data. They cannot see data from other companies.
  • Legal requirements: if required by law, court order, or a government authority in India.

6. Data retention

  • Demo request and contact form data: retained for 2 years from submission.
  • Campaign and employee data: retained for 7 years to comply with Indian tax record-keeping requirements (Income Tax Act 1961).
  • Analytics and usage logs: retained for 12 months.

You may request deletion at any time (see Section 8). Where we are legally required to retain data, we will inform you.

7. Data security

We use industry-standard measures to protect your data, including TLS encryption in transit, hashed tokens for authentication, and access controls limiting who can view personal data. No system is completely secure; we will notify you promptly if a breach affects your data, as required by the DPDP Act.

8. Your rights

Under the DPDP Act 2023, you have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Correction: ask us to correct inaccurate or incomplete data.
  • Erasure: request deletion of your data, subject to legal retention requirements.
  • Grievance redressal: raise a complaint with our Data Protection Officer.
  • Nomination: nominate another individual to exercise rights on your behalf in the event of death or incapacity.

To exercise any of these rights, email us at privacy@rippld.in. We will respond within 30 days.

9. Cookies

We use only strictly necessary cookies: a session cookie to keep you logged in to the platform. We do not use tracking, advertising, or third-party analytics cookies.

10. Children's data

The Rippld platform is intended for use by businesses and their adult employees. We do not knowingly collect data from anyone under 18 years of age.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via email to registered Customers or via a notice on this page. Continued use of the Service after changes constitutes acceptance of the updated Policy.

12. Contact us

For any privacy-related questions, requests, or complaints, contact our Data Protection Officer:

Rippld Technologies Private Limited
Email: privacy@rippld.in
General enquiries: hello@rippld.in

If you are not satisfied with our response, you may approach the Data Protection Board of India once constituted under the DPDP Act 2023.