Privacy Policy

Last updated: September 1, 2026

Ridge AI, LLC, including its wholly-owned subsidiary Ridge (joinridge.co) (“Ridge,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our websites, platform, and services (together, the “Services”).

  1. Our role: controller and processor

Ridge handles two different categories of information, and our responsibilities differ between them.

Where we act as a controller. For information about our own account holders and website visitors — your name, work email, company, phone number, billing details, and how you use the Services — we determine the purposes of processing and act as a controller.

Where we act as a processor. For information you connect, upload, or otherwise make available to us about third parties — your CRM records, prospect and lead lists, and the contents of any mailbox or calendar you connect — we act as a processor on your documented instructions. You remain the controller of that information. You are responsible for having a lawful basis to collect it and to provide it to us, for the accuracy of it, and for honouring the rights of the individuals it describes.

  1. Information we collect
    Information you provide directly: name, email address, company, phone number, account credentials, and billing information.
    Information you connect or upload: CRM data, prospect and lead lists, spreadsheets, and other business records you choose to link to your account.
    Google user data: where you connect a Google account, the data described in Section 3.
    Information collected automatically: IP address, device and browser information, pages viewed, actions taken, and similar usage data collected through cookies and comparable technologies.
    AI inputs and outputs: the prompts, instructions and source material you provide to our AI features, and the drafts and recommendations those features generate.

  2. Google user data

Connecting a Google account is optional and is never required to use Ridge. Where you do connect one, we request only the permissions needed for the features you have enabled, and we use that access solely as follows.

Gmail. We read message threads involving the prospects in your follow-up sequences, so Ridge can determine whether someone has already replied and stop the sequence if they have. We also create draft replies in your Gmail for you to review and edit. Ridge does not send any message without an action you take.
Google Calendar. We read your free/busy availability and events on your primary calendar, so that meeting times Ridge proposes do not conflict with commitments you already have. We never create, modify or delete calendar events.
Google Sheets. Where you paste the URL of a specific spreadsheet into Ridge, we read the rows of that spreadsheet to populate your follow-up queue. We access only the sheet you identify, we do not browse or search your Drive, and we never write to it.
Basic profile. We read your email address and profile name to show you which account is connected and to set the correct sender identity on messages you send through Ridge.
Limited Use commitment

Ridge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We use Google user data only to provide and improve the user-facing features described above.
We do not use Google user data to create, train, or improve any generalized machine-learning or artificial-intelligence model, and we do not transfer it to any third party for that purpose.
We do not transfer Google user data to third parties except as necessary to provide those features, to comply with applicable law, or in connection with a merger, acquisition, or sale of assets, in which case we will seek assurances that the recipient upholds this policy.
We do not use Google user data for advertising of any kind.
We do not allow humans to read Google user data, except where you have given explicit consent so that we can resolve a specific support issue, where it is necessary for security purposes such as investigating abuse, where we are required to do so by law, or where the data has been aggregated and anonymised.
Infrastructure providers

Ridge uses third-party infrastructure providers, including Vercel (application hosting) and Neon (database), to operate the Services. We do not sell Google user data.

Storage, revocation and deletion

Google access and refresh tokens are encrypted at rest before being written to our database and are never written to logs. Message content is retained only for as long as necessary to produce and deliver the drafts you have requested.

You may disconnect your Google account at any time from Settings within Ridge, or revoke our access directly at myaccount.google.com/permissions. Revocation immediately ends our access. To request deletion of Google user data we still hold, email sales@joinridge.co; we will action the request within 30 days, subject to any retention we are legally required to maintain.

  1. How we use information

We use personal information to:

Provide, maintain, secure and improve the Services;
Process payments and administer accounts;
Communicate with you about your account, support requests and service changes;
Analyse usage patterns to improve performance and reliability;
Develop and improve our features, including AI features, subject to Section 5;
Detect, investigate and prevent fraud, abuse and security incidents; and
Comply with legal obligations and protect our legal rights.
5. Artificial intelligence and model training

Ridge uses artificial intelligence to generate drafts, recommendations and account intelligence. Two commitments govern how the underlying data may be used.

Google user data is excluded entirely. We do not use any data received from Google APIs to create, train, or improve any machine-learning or artificial-intelligence model, whether our own or a third party's. This exclusion is absolute and is not subject to consent.

Other data. For information that does not originate from Google APIs, we may use aggregated or de-identified data to evaluate and improve the quality of our features. Where we would use identifiable customer content to train or fine-tune a model, we will obtain your prior consent, and you may decline without losing access to the Services.

  1. How we share information

We share personal information with service providers who help us operate the Services, each under written contracts that restrict their use of it to providing services to us, including hosting, database, AI processing, and payment providers. We may update this list as our infrastructure changes and will keep this policy current.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We may disclose information where required by law, in response to valid legal process, or where necessary to protect the rights, safety or property of Ridge, our customers or the public. If Ridge is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to Section 3 for Google user data.

  1. Data retention

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by law. When you close your account we delete or de-identify your data within 90 days, except where we are required to retain it for legal, tax, accounting or dispute-resolution purposes. Backups are purged on our ordinary rotation.

  1. Security

We implement reasonable technical and organisational measures to protect personal information, including encryption of credentials and access tokens at rest, encryption in transit, and access controls limiting who within Ridge can reach customer data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

  1. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, port or restrict the use of your personal information, to object to certain processing, and to withdraw consent you have given. Residents of California have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of sale or sharing — noting that we do not sell or share personal information as those terms are defined.

To exercise any of these rights, contact us at sales@joinridge.co. We will respond within the period required by applicable law. We will not discriminate against you for exercising a privacy right.

Where you have connected third-party data to Ridge and an individual described in that data contacts us directly, we will refer them to you as the controller and assist you in responding.

  1. Cookies and similar technologies

We use cookies and comparable technologies to keep you signed in, remember your preferences, secure the Services, and understand how the Services are used. Strictly necessary cookies are required for the platform to function. You can control non-essential cookies through your browser settings; blocking strictly necessary cookies may prevent parts of the Services from working.

  1. Children

The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it.

  1. International transfers

We are based in the United States and process information there. Where we transfer personal information across borders, we rely on appropriate safeguards, including standard contractual clauses where required.

  1. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date reflects the most recent revision. Where changes are material, we will provide notice through the Services or by email before they take effect. Continued use after changes take effect constitutes acceptance.

  1. Contact us

Ridge AI, LLC
sales@joinridge.co