Privacy Policy

Last Updated: August 18, 2026 Effective Date: August 18, 2026

This Privacy Policy explains how RAMP.AI LLC ("Ramp AI," "we," "us," or "our"), a New Jersey limited liability company, collects, uses, discloses, and protects personal information.

1. Scope of This Policy

This Policy covers personal information we collect through:

• Our marketing website at rampwithai.today and related subdomains;
• Account creation, login, and administration of the Ramp AI CRM platform ("Service") by business customers and their authorized users;
• Billing and support interactions;
• SMS, email, and other communications you have with us directly.

This Policy does NOT govern personal information that our business customers (e.g., salons, contractors, clinics using the Service) collect about their own customers, clients, or patients and store within the CRM ("Customer Data"). With respect to Customer Data:

• Our business customer is the "controller" (or "business," in CCPA terminology). They decide what data to collect from their own customers and why.
• Ramp AI acts only as a "processor" / "service provider" — we process Customer Data solely on our business customer's instructions, under our Data Processing Addendum, to provide the Service (e.g., appointment scheduling, AI-assisted messaging, billing follow-up).
• If you are an end customer of one of our business customers (for example, you booked an appointment with a salon that uses Ramp AI) and have a privacy question about your data, please contact that business directly — Ramp AI cannot act on your request without their instruction, though we will assist them in responding as required by law and our contract.

2. Information We Collect

a. Account & Billing Information (collected directly from you) Name, work email, phone number, company name, billing address, and payment-related metadata. Full card data is handled by Stripe directly — we do not store full card numbers.

b. Usage & Device Information (collected automatically) IP address, browser/device type, pages visited, feature usage, timestamps, and log data.

c. Cookies & Tracking Technologies We use a small number of tracking technologies on our marketing site, described in full in our Cookie & Tracking Policy. In summary: the AI chat widget stores a first-party identifier in your browser's local storage so it can recognize returning visitors; our pages carry a Meta domain-verification tag (which does not track visitors); and no advertising pixel or third-party analytics tracker is currently active on this site. If we enable an advertising tracker in the future (such as the Meta Pixel), we will update this Policy and the Cookie & Tracking Policy first and provide an opt-out before it fires.

Like many services, we do not respond to browser "Do Not Track" (DNT) signals, as no common industry standard for DNT exists. Our approach to the Global Privacy Control (GPC) signal is described in Section 8.

d. User Content If you contact us for support or through the AI chat widget on our marketing site, we collect the content of that communication.

3. How We Use Information

We use the information above to: provide and improve the Service; process payments via Stripe; send transactional, account, and (with consent) SMS communications; provide customer support; secure our systems; comply with legal obligations; and measure and improve our marketing.

4. AI Processing

The Service uses artificial intelligence, including generative AI models, to power features such as customer messaging, appointment scheduling assistance, content generation, and billing follow-up. These AI features are built on Google's Gemini models, accessed via the paid Google Gemini API / Vertex AI.

Prompts and responses processed through our paid Gemini API / Vertex AI integration are not used by Google to train its underlying models. Data processed by our AI features remains subject to the processor/controller framework in Section 1 — if the data being processed is Customer Data belonging to one of our business customers' end customers, that business customer's instructions and our Data Processing Addendum govern. We do not use Customer Data to train our own AI models.

5. How We Share Information — Subprocessors

We share information with the following categories of service providers, each acting as our processor/subprocessor under contract, not as an independent controller of your data. The current list is published and maintained at our Subprocessors page. In summary:

We may also disclose information: to comply with law, subpoena, or legal process; to protect our rights, safety, or property; or in connection with a merger, acquisition, or sale of assets (in which case this Policy would continue to apply to previously collected data until superseded).

We do not sell personal information for money, and no data sharing with advertising partners is currently taking place. Under CCPA/CPRA's broad definitions, certain advertising-related sharing (e.g., via a tracking pixel) can be considered a "sale" or "share" even without money changing hands — if we ever begin such sharing, we will update this Policy first and provide the opt-out rights described in Section 8.

6. SMS / Mobile Messaging

If you provide your mobile phone number and opt in, Ramp AI (or a business customer using the Service, via our platform) may send you SMS text messages related to account setup, onboarding, appointment reminders, and customer support.

• Consent. By opting in (e.g., checking a consent box, replying to a keyword campaign, or providing your number in an onboarding flow that discloses SMS use), you agree to receive these text messages. Consent to receive SMS messages is not a condition of purchasing any goods or services.
• Message frequency varies based on your account activity and the business you're interacting with.
• Message and data rates may apply, based on your mobile carrier plan.
• Opt-out: Reply STOP to any message to opt out at any time. You may receive one final confirmation message.
• Help: Reply HELP for assistance, or contact us at support@rampwithai.today or +1 917-524-7561.
• Carrier disclaimer: Carriers are not liable for delayed or undelivered messages.
• No sharing of SMS opt-in data. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in and SMS consent data will not be shared with or sold to third parties or affiliates for marketing purposes. All other categories, including but not limited to text messaging originator opt-in data and consent, will not be shared with any third parties, except with our SMS delivery subprocessor (Twilio) solely to deliver the messages described above.

7. Data Retention & Deletion

We retain personal information for as long as your account is active, or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements.

On account closure, you may export your Customer Data for 30 days after termination (see our Terms of Use, Section 14). After that window, we delete or de-identify personal information within the timelines stated in our Data Processing Addendum, except where continued retention is required by law; residual copies may persist in encrypted backups for a limited period before being purged.

8. Your Privacy Rights (State Privacy Laws)

Depending on your state of residence, you may have the right to:

• Know / Access — what personal information we've collected about you;
• Correct — inaccurate personal information;
• Delete — your personal information, subject to certain legal exceptions;
• Opt out of the "sale" or "sharing" of your personal information and of certain profiling;
• Appeal a denial of any of the above requests (in Virginia, Colorado, Connecticut, and other states with an appeal right).

These rights arise under laws including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the New Jersey Data Privacy Act (NJDPA), and similar laws in Virginia, Colorado, Connecticut, and other states as they take effect. Where a given law's coverage thresholds do not yet apply to us, we voluntarily extend these rights to the extent practicable.

To submit a request: email privacy@rampwithai.today or call +1 917-524-7561. We will verify your identity before fulfilling requests involving access or deletion.

Opt-out of sale/sharing & Global Privacy Control (GPC): As stated in Section 5, we do not currently sell or share personal information for cross-context behavioral advertising, so there is no active sale/sharing to opt out of. Before any advertising tracker is enabled, we will ship an opt-out control — including automatic honoring of the GPC browser signal as a valid opt-out request — as described in our Cookie & Tracking Policy.

We will not discriminate against you for exercising any of these rights.

9. International Data Transfers

We are a US company and primarily serve US-based customers. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. For business customers with EU/UK/Swiss data subjects, transfer terms are addressed through our Data Processing Addendum.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, or disclosure, appropriate to the type of data and how it is processed — including encryption in transit, per-tenant data isolation, and role-based access controls (see the Data Processing Addendum, Annex B, for more detail). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18. If we learn we have collected personal information from a child under that age without appropriate consent, we will delete it. As noted in Section 1, if a business customer's end-customer record concerns a minor, that is governed by the business customer's own practices and applicable law, though we will support compliant deletion on instruction.

12. Changes to This Policy

We may update this Policy from time to time. We will update the "Last Updated" date above and, for material changes, provide additional notice (e.g., email or in-product notice). We review this Policy at least annually.

13. Contact Us

RAMP.AI LLC — Attn: Privacy 186 Columbia Turnpike #5-177, Florham Park, NJ 07932 Email: privacy@rampwithai.today (privacy requests and notices) · support@rampwithai.today (account help) Phone: +1 917-524-7561