Privacy Policy

This Privacy Policy explains how Jasper Tech Labs ("we", "us", "our") collects, uses, shares and protects personal data when you use RipeX and visit ripex.cloud. We are committed to handling personal data responsibly and in accordance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who we are

Jasper Tech Labs is the operator of RipeX and acts as the Data Fiduciary in respect of the personal data described in this policy. Where you use RipeX to process personal data about your own customers, you are the Data Fiduciary for that data and we act as a Data Processor on your instructions.

2. Personal data we collect

We collect the following categories of personal data:

• Account & contact data — name, business name, email address, phone number, and login credentials.
• Billing data — subscription plan, billing details, GST information, and transaction records. Card and bank details are handled by our payment partners, not stored by us.
• Usage & device data — log data such as IP address, browser type, pages visited, and actions within the app, used to keep the service secure and reliable.
• Support data — messages, screenshots, and details you share when contacting us.
• Customer Data you enter — the catalogue, orders, invoices and end-customer details you store in RipeX, which we process on your behalf.

3. How we collect it

We collect personal data directly from you when you register, subscribe, use the platform, or contact us; automatically through cookies and similar technologies (see our Cookie Policy); and, where relevant, from our payment and infrastructure partners in the course of providing the service.

4. Purposes & lawful basis

We process personal data to: provide, operate and maintain RipeX; set up accounts and authenticate users; process subscriptions, billing and GST; provide support; keep the service secure and prevent fraud; improve and develop features; and comply with legal obligations. Under the DPDP Act we rely primarily on your consent and on processing that is necessary for the performance of our service to you and for certain legitimate uses permitted by law. Where we rely on consent, you may withdraw it at any time.

5. Sharing & processors

We do not sell your personal data. We share it only with:

• Service providers / processors who host, secure and support the platform (for example cloud infrastructure and payment gateways), under appropriate confidentiality and data-protection obligations;
• Authorities where required by law or to protect our rights, users, or the public; and
• Successors in the event of a merger, acquisition or reorganisation, subject to this policy.

6. Cookies & local storage

We use essential and functional cookies and browser local storage — for example to remember your theme preference and keep you signed in. We do not use intrusive advertising trackers. Full details are in our Cookie Policy.

7. Data retention

We retain personal data for as long as your account is active and as needed to provide the service, and thereafter only as required to meet legal, tax, accounting or security obligations. When data is no longer required, we delete or anonymise it. You can request deletion as described below.

8. Security

We apply reasonable technical and organisational safeguards to protect personal data, including encryption in transit, access controls, logical isolation between businesses, and monitoring. No system is perfectly secure, but we work continuously to protect your information and will notify affected users and the relevant authority of a personal data breach where the law requires.

9. Your rights

Subject to the DPDP Act, you have the right to:

• Access a summary of the personal data we process about you;
• Correction of inaccurate or incomplete data, and completion or updating of data;
• Erasure of your personal data where it is no longer needed or you withdraw consent;
• Grievance redressal — raise a concern with our Grievance Officer (below); and
• Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any right, contact us using the details below. We will respond within the timelines required by law.

10. Children’s data

RipeX is a business tool intended for use by adults. We do not knowingly collect personal data of children. If you believe a child’s data has been provided to us, please contact us so we can address it.

11. International transfers

We aim to store and process data within India. Where any processing takes place outside India (for example a sub-processor), we do so only as permitted by applicable law and with appropriate safeguards in place.

12. Grievance Officer

EU/EEA visitors should also see our GDPR statement.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or the law. We will revise the "Last updated" date and, for material changes, take reasonable steps to notify you.