Privacy

The website

• No sign-up and no cookies. Visits are counted with Vercel Web Analytics, which uses no cookies, doesn't identify you and isn't used for advertising.
• Files you open in the “Run it” builder, and answers you paste into “Test your assistant”, stay inside your browser. They are never uploaded.
• If you send feedback, the form sends what you type (and your email, if you give it) to Formspree, which forwards it to us. Don’t include company documents.
• Fonts and scripts are served from this site. No third-party service sees your visit.
• The site is hosted on Vercel in the United States. Vercel keeps standard request logs (IP address, time, page) for a short period.

The Microsoft 365 connection

If you connect RippleSync to your AI assistant or to RippleSync automation, it can read your Microsoft 365 files, pages, email, meeting transcripts, chats and channel messages when asked, and only with the read-only permissions you approve when you sign in.

• Nothing is stored. Each request is handled and forgotten. There is no database.
• The connection runs on Vercel in the United States. Text read from Microsoft 365 passes through it in memory, straight to your AI assistant, which runs the check. It is processed under your assistant's own terms and your company's agreement with that provider.
• Your Microsoft sign-in tokens are encrypted and held by your assistant, not by RippleSync. They can't be read without the server's key, and they expire.
• It cannot edit, send, delete or share anything: it only asks Microsoft for read permissions.
• Vercel keeps standard request logs (time, address, response code). Document text is not logged.
• To disconnect, remove the connection in your assistant and revoke RippleSync at myapps.microsoft.com (or ask your Microsoft 365 admin).

The Microsoft 365 Copilot agent

The Copilot agent runs entirely inside your Microsoft 365 tenant, under Microsoft's terms. RippleSync never sees your content or your questions.

The instructions

If you paste the RippleSync instructions into ChatGPT, Claude, Gemini, Copilot or another assistant, everything happens in that assistant. RippleSync is not involved.

Who processes data

Vercel (hosting, United States) and Formspree (feedback form, United States). Microsoft and your AI assistant's provider process content under your company's own agreements with them. Details are on the security page.

Your choices and requests

• The only personal data RippleSync itself keeps is what you send through the feedback form. You can ask to see it, correct it or delete it.
• To make a request or ask a question about privacy, use the feedback form and choose “Privacy request”. Give an email so we can reply.
• RippleSync isn't meant for children and doesn't knowingly collect their data.

Changes to this page

• 5 November 2026: visits now counted with cookieless Vercel Web Analytics; fonts and scripts served from this site; added data locations, who processes data and how to make requests; Microsoft 365 sign-ins now last at most 30 days without use.
• 3 November 2026: first version.