The paperwork, in plain language.
Four documents govern Ripal: the Terms of Service and Privacy Policy for everyone, plus one agreement per side of the marketplace. Signed versions land at signup.
Privacy Policy
RIPAL, INC. · DRAFT V0.3 · 2026-07-181.What we collect
Account details, identity verification results from our verification vendor, OAuth-connected channel statistics, transaction records, and messages sent on the platform. We never store raw government ID documents; our vendor confirms outcomes only.
2.How we use it
To run the marketplace: matching, escrow, fraud prevention, dispute resolution, and the AI features you enable such as the Auto-Buyer and Rippy. We do not sell personal data.
3.Verified stats and public profiles
Creator profiles display follower counts, engagement, on-time percentages, and reviews publicly. Exact pricing and contact routes stay behind login. Public pages carry anti-scraping rate limits, and automated collection is logged and blocked.
4.Sharing
We share data with processors who make the service work: payment processing (Stripe), identity verification, and platform API providers. Each is bound to use data only to provide its service to us. We disclose data when the law requires it.
5.Retention and the right to be forgotten
Close your account and we delete your private personal data. Anonymized transaction outcomes and niche-level performance data are retained for marketplace integrity and analytics after all personal identifiers are removed. Records required for tax or legal compliance are kept for their mandated period.
6.Security
Mandatory two-factor authentication, encryption in transit and at rest, and an immutable audit log on every transaction. We notify affected users of qualifying incidents within the timelines the law sets.
7.Your rights
Access, correction, export, and deletion requests are honored under GDPR, CCPA, and comparable laws wherever you live. Submit requests from account settings or to the privacy contact below.
8.Contact
Privacy questions and requests go to the platform's designated privacy contact listed in your account documentation. We answer within the statutory window for your jurisdiction.