Privacy Notice

1. Who we are

Rip Society operates the Rip Society Comp Pro service. For the personal data described in this notice, Rip Society is the data controller — meaning we decide how and why your data is processed.

2. What we collect

• Account data — your name, email address and login credentials, used to create and secure your account.
• Collection files — the CSV files you upload and the comp results we generate for you, used solely to provide the Service.
• Usage data — how you use the Service (for example, how many comps you run), used to enforce plan limits, prevent abuse and improve the product.
• Technical data — IP address, browser and device identifiers, used for security and fraud prevention.
• Support messages — anything you send us when you ask for help.

Payment details (card numbers, billing address) are collected and processed by Stripe — we never see or store your full card details.

3. Why we use it (legal basis)

• Performing our contract with you — creating your account, providing comps, managing your subscription.
• Legitimate interests — keeping the Service secure, preventing fraud, understanding and improving how the Service is used.
• Legal obligations — records we must keep for tax and accounting.
• Consent — where we ask for it, for example optional marketing emails; you can withdraw consent at any time.

4. Who we share it with

• Service providers — hosting, database and infrastructure providers that run the Service for us.
• Stripe — for payment processing, subscription management, applicable tax compliance, fraud prevention and invoicing.
• Professional advisers — lawyers and accountants, where needed.
• Authorities — where the law requires it.

We do not sell your personal data.

5. How long we keep it

We keep your data for as long as your account is active and as long afterwards as we need for legal, tax and accounting purposes. When data is no longer needed, we delete or anonymise it.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent. To exercise any of these rights, contact us through the site. If you are in the EEA or UK, you also have the right to complain to your data protection authority; we respond to requests within one month. Where your data is transferred outside the EEA or UK, we rely on appropriate safeguards such as standard contractual clauses.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls that limit who can see what.

8. Cookies

We use essential cookies and browser storage only — to keep you signed in and to remember your in-progress uploads. We do not use advertising or marketing cookies. You can clear these in your browser settings, but the Service may not work correctly without the essential ones.

9. Changes

If we change this notice, we'll update the date at the top. Continued use of the Service after a change means you accept the updated notice.