01 Introduction
RippleStep ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
Please read this Privacy Policy carefully. By accessing or using our website, you agree to be bound by the terms and conditions described in this policy. If you do not agree with our policies and practices, please do not use our services.
02 Information We Collect
2.1 Information You Provide to Us
When you contact us through our plugins or provide deactivation feedback, we may collect:
- Email address
- Your website URL
- Plugin version information
- Any other information you choose to include in your communication
2.2 Plugin Data Handling
We connect your platforms. We do not keep your data.
In plain terms: your customers, content, docs, and records stay between your WordPress site and the platform you connect (such as Intercom, Airtable, or Confluence). RippleStep does not use that data to train models, sell lists, build profiles, or run analytics on your business.
- What stays yours: synced content, customers, documentation, and other business data
- Where it lives: on your WordPress site and the third-party platform you chose
- What RippleStep does not do: store, read, or reuse that data on our servers
2.3 Connecting a Platform (OAuth or API Key)
You can connect a plugin to a third-party platform in two ways:
- API key (direct): You enter credentials in your WordPress admin. The connection runs only between your site and the platform. Nothing touches RippleStep servers.
- OAuth (optional): A one-click sign-in flow that makes setup easier. OAuth is completely optional — you never have to use it if you prefer API keys.
When you choose OAuth, WordPress plugins cannot safely hold the secret keys those platforms require, so the sign-in step goes through RippleStep’s secure login helper at auth.ripplestep.com.
Think of OAuth as a key exchange for easier setup — not a data warehouse. The proxy’s only job is to finish the login securely and hand the connection back to your site.
What the proxy may handle (only if you use OAuth, and only as needed to complete login):
- Short-lived login codes and security checks during the connection
- Tokens needed to finish authentication with the platform
- Minimal technical IDs so your WordPress site can receive the result
What the proxy does not store or use:
- Your Intercom / Airtable / Confluence content or records
- Your customers, contacts, or documentation
- Your personal profile from those platforms for marketing or product analytics
After you connect — whether by API key or OAuth — day-to-day sync and publishing happen between your WordPress site and the third-party platform, not through a RippleStep content database.
2.4 Website Visitor Information
When you visit our website, we may automatically collect limited information about your device:
- IP address and location data
- Browser type and version
- Operating system
- Pages visited and time spent on pages
- Referring website addresses
- Cookies and similar tracking technologies
03 How We Use Your Information
We use the information we collect for various purposes, including:
- To provide, maintain, and improve our services
- To complete optional OAuth connections through our auth proxy when you choose that setup method
- To process transactions and send related information
- To send administrative information, updates, and security alerts
- To respond to your comments, questions, and requests
- To personalize your experience and deliver relevant content
- To monitor and analyze usage patterns and trends on our website
- To detect, prevent, and address technical issues and security threats
- To comply with legal obligations and enforce our terms
04 Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
- With service providers who assist us in operating our website and conducting our business
- When required by law or to respond to legal process
- To protect our rights, property, or safety, or that of our users or others
- In connection with a merger, acquisition, or sale of assets (with notice to users)
- With your explicit consent or at your direction
05 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and store information about your preferences and activity on our website. Cookies are small data files stored on your device that help us improve your experience.
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our website.
For more detail, see our Cookie Policy.
06 Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
07 Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information, including:
- The right to access and receive a copy of your personal data
- The right to rectify inaccurate or incomplete information
- The right to request deletion of your personal data
- The right to object to or restrict processing of your data
- The right to data portability
- The right to withdraw consent at any time
To exercise these rights, please contact us using the information in the Contact Us section below.
08 Data Retention
We retain personal information collected through our website for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
If you use the optional OAuth setup, login-related technical data on the auth proxy is kept only as long as needed to complete and secure the connection — not as a copy of your connected-platform content or user profiles. If you connect with an API key instead, that login path never uses our servers.
When you uninstall our plugins, plugin content and settings remain on your WordPress site (and on the third-party platforms you connected). Disconnecting a platform ends that connection.
09 Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.
10 Data Transfers
After you connect a plugin, your content and business data move between your WordPress site and platforms like Confluence, Intercom, or Airtable. RippleStep is not in the middle of that content path as a store or processor of your records.
If you connect with an API key, authentication also stays between your site and the platform — nothing touches RippleStep servers. If you choose optional OAuth for easier setup, the only RippleStep hop is the login helper at auth.ripplestep.com, which handles authentication mechanics — not your synced data.
11 Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
12 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: