Privacy Policy

1. Introduction

RampRight ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our employee onboarding platform ("Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you register for the Service, including:

• Name and contact information (email address, phone number)
• Company name and job title
• Profile information (profile picture, department, start date)
• Account credentials (email and password)
• Payment and billing information

Usage Data

We automatically collect certain information when you access and use the Service, including:

• Device information (device type, operating system, browser type)
• IP address and location data
• Pages visited and features used
• Time and date of visits
• Referring website or application
• Onboarding progress and task completion data

Cookies and Tracking Technologies

We use cookies, beacons, tags, and similar tracking technologies to collect and track information about your use of the Service. Cookies are small data files stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

3. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, operate, and maintain the Service
• Create and manage your account
• Process transactions and send related information
• Send administrative information, such as updates and security alerts
• Respond to your comments, questions, and requests
• Provide customer support
• Monitor and analyze usage patterns and trends
• Improve and personalize the Service
• Develop new products, services, and features
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. How We Share Your Information

We may share the information we collect in the following circumstances:

With Your Organization

If you use the Service through your employer or another organization, we may share your information with that organization as necessary to provide the Service.

With Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as hosting, data analytics, payment processing, and customer support.

For Legal Purposes

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

With Your Consent

We may share your information with your consent or at your direction.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. We may also retain and use your information to comply with our legal obligations, resolve disputes, and enforce our agreements.

When you or your organization terminate your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal purposes.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response procedures

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You have the right to request a copy of the personal information we hold about you and to receive it in a structured, commonly used, and machine-readable format.

Correction

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

Deletion

You have the right to request that we delete your personal information, subject to certain exceptions.

Opt-Out

You may opt out of receiving promotional communications from us by following the unsubscribe instructions in those messages. Even if you opt out, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.

To exercise any of these rights, please contact us using the information provided below.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer your information to other countries, we will protect that information as described in this Privacy Policy and in accordance with applicable law. We use appropriate safeguards, such as standard contractual clauses, to ensure that your personal information receives an adequate level of protection.

9. Children's Privacy

The Service is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.

10. Third-Party Links

The Service may contain links to third-party websites or services that are not owned or controlled by RampRight. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party websites you visit.

11. California Privacy Rights

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). These include the right to:

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt-out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain data protection rights under the General Data Protection Regulation (GDPR). In addition to the rights listed above, you have the right to:

• Restrict or object to our processing of your personal information
• Withdraw your consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We will also notify you via email or through a notice on the Service prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Google Calendar Integration & Data Use

RampRight offers optional integration with Google Calendar to enable scheduling coordination, availability checks, and meeting creation within the platform.

What Google Calendar Data We Access

When a user connects their Google account, RampRight may access the following Google Calendar data:

• Calendar availability (free/busy information)
• Calendar event metadata necessary to create or manage meetings
• Calendar identifiers associated with the user's account

RampRight does not access or store the full content of calendar event descriptions unless required to create or update an event at the user's direction.

Purpose of Use

Google Calendar data is used solely to:

• Check availability when coordinating meetings
• Create calendar events initiated by the user
• Improve scheduling efficiency within RampRight
• Support readiness workflows that involve meeting coordination

We do not use Google Calendar data for advertising purposes. We do not sell Google Calendar data. We do not use Google Calendar data to train AI models. Google Calendar data is used strictly to provide and improve core RampRight functionality.

Data Storage & Security

• RampRight stores only the minimum calendar-related data required to provide the integration.
• OAuth tokens are encrypted in transit and at rest.
• Access is restricted to authorized system processes.
• Calendar data is not shared with third parties except as required to provide the service (e.g., Google APIs).

User Control & Revoking Access

Users may revoke RampRight's access to their Google Calendar at any time by:

1. Visiting their Google Account Permissions page at myaccount.google.com/permissions
2. Selecting "RampRight"
3. Clicking "Remove Access"

Users may also disconnect Google Calendar directly within their RampRight account settings.

Upon revocation:

• RampRight will no longer access Google Calendar data.
• Stored OAuth tokens are invalidated.
• Future calendar sync is disabled.

Google API Services Compliance

RampRight's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

15. Slack Integration

RampRight offers an optional Slack integration that enables customers to receive readiness alerts and workflow notifications within their Slack workspace.

Data Access

The RampRight Slack app uses the following permissions:

• chat:write to post readiness alerts and workflow notifications to administrator-authorized Slack channels.
• users:read to retrieve basic user profile information (such as Slack user ID and display name).
• users:read.email to securely match Slack workspace users to existing RampRight accounts during the connection process.

RampRight does not access or store Slack message content, channel history, or private conversations.

Purpose of Use

Slack user profile and email information is used solely for:

• Linking Slack users to existing RampRight accounts
• Routing notifications appropriately
• Supporting account-level configuration of the Slack integration

Slack data is not sold, rented, or used for advertising purposes.

Data Storage

RampRight stores only:

• Slack workspace identifiers
• Slack user identifiers required for account mapping
• Bot access tokens necessary to send messages

Slack message content is not stored within RampRight systems.

Revoking Access

Workspace administrators may revoke RampRight's Slack access at any time by:

1. Uninstalling the RampRight app from their Slack workspace, or
2. Disconnecting Slack within RampRight's application settings.

Upon revocation, associated access tokens are invalidated and Slack data is no longer processed.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: rj@rampright.ai