Effective Date: September 27, 2026
Last Updated: September 27, 2026

1. About This Privacy Policy

This Privacy Policy explains how Ravant Technologies FZCO, operating the ripr platform ("ripr", "we", "us", or "our"), collects, uses, stores, shares, protects, and otherwise processes information when you access or use:

• the ripr website at ripr.trade;

• ripr mobile, desktop, or web applications;

• ripr trading, wallet, social, streaming, discovery, and related features; and

• any other products or services that link to this Privacy Policy,

collectively, the "Services."

Ravant Technologies FZCO is a company incorporated in Dubai, United Arab Emirates.

Registered Office: DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates
Trade License No.: 36692

Ravant Technologies FZCO is the entity responsible for determining how and why Personal Data collected through the Services is processed, except where another party independently determines the purposes and means of processing.

By using the Services, you acknowledge the data practices described in this Privacy Policy.

Where consent is legally required for a particular type of processing, we will request that consent separately.

If you do not agree with this Privacy Policy, you should not use the Services.

2. Scope

This Privacy Policy applies to information processed by ripr in connection with the Services.

It does not govern the privacy practices of independent third parties, including:

• blockchain networks;

• decentralized exchanges;

• token issuers;

• wallet providers;

• third-party authentication providers;

• payment or fiat on-ramp/off-ramp providers;

• websites or applications linked from ripr; or

• third-party services that you choose to connect to ripr.

Those parties may process information under their own privacy policies and terms.

3. Information We Collect

The information we collect depends on how you use ripr and which features you choose to use.

3.1 Account and Profile Information

When you create or maintain a ripr account, we may collect information such as:

• name or display name;

• username;

• email address;

• profile photograph or avatar;

• account identifiers;

• authentication information;

• linked social or third-party accounts;

• profile description;

• preferences and settings; and

• other information you choose to add to your profile.

3.2 Authentication Information

If you create or access your account through a third-party authentication service, such as Google or another supported sign-in provider, we may receive information authorized by you through that service.

The specific information received depends on the permissions you grant.

More information regarding Google authentication is provided in the Google User Data section below.

3.3 Wallet and Blockchain Information

When you connect, use, or interact with a blockchain wallet through ripr, we may process information including:

• public wallet addresses;

• blockchain account identifiers;

• wallet connection information;

• token holdings associated with public addresses;

• transaction hashes;

• transaction history;

• smart-contract interactions;

• token swaps and trades;

• blockchain network information; and

• other publicly available blockchain data.

Public blockchain addresses and blockchain transactions may be visible to anyone and are generally permanently recorded on the relevant blockchain.

Unless explicitly stated otherwise for a particular feature, ripr does not require or request your wallet private keys or seed phrases.

You should never provide your private key or seed phrase to ripr support personnel or through any ripr communication channel.

3.4 Trading and Transaction Information

When you use trading or transaction-related functionality, we may process information including:

• assets viewed or traded;

• order and trade activity;

• transaction amounts;

• quoted and executed prices;

• timestamps;

• transaction identifiers;

• liquidity pool or market information;

• connected wallet addresses;

• trading history;

• positions and portfolio-related information; and

• related interaction data.

Some information may originate directly from public blockchain networks rather than from you.

3.5 Social and User-Generated Content

If you use ripr's social, community, content, chat, commenting, streaming, or similar functionality, we may process content you create or provide, including:

• posts;

• comments;

• reactions;

• follows;

• likes;

• messages where applicable;

• livestream content;

• images;

• video;

• audio;

• profile content;

• token or market tags;

• content engagement information; and

• reports or moderation submissions.

Content that you choose to publish publicly may be visible to other users and may be indexed, copied, shared, or otherwise redistributed outside ripr.

You should not publish information you wish to remain private.

3.6 Communications and Support Information

When you contact us, we may collect:

• your contact information;

• correspondence with us;

• support requests;

• feedback;

• complaint information;

• attachments you provide; and

• information necessary to investigate or resolve your request.

3.7 Identity, Compliance, and Verification Information

Certain Services or third-party financial services accessible through ripr may require identity or compliance checks.

Where required by applicable law or the functionality you request, we or an authorized service provider may process information such as:

• legal name;

• date of birth;

• nationality;

• country of residence;

• government-issued identification;

• proof of address;

• verification photographs or video;

• sanctions or politically exposed person screening results; and

• information required for anti-money-laundering, fraud-prevention, sanctions, or other compliance purposes.

Where verification is carried out directly by a third-party provider, that provider may separately control some of the Personal Data it collects.

3.8 Device and Usage Information

When you use the Services, we may automatically collect information such as:

• IP address;

• browser type and version;

• operating system;

• device type;

• device identifiers;

• language;

• approximate location derived from IP address;

• time zone;

• referring URLs;

• pages or screens viewed;

• links or buttons clicked;

• session information;

• timestamps;

• application events;

• crash reports;

• performance information; and

• other diagnostic or usage data.

We use this information to operate, secure, troubleshoot, analyze, and improve the Services.

3.9 Cookies and Similar Technologies

We may use cookies, local storage, pixels, SDKs, and similar technologies to:

• keep users signed in;

• maintain sessions;

• remember preferences;

• protect accounts;

• detect fraud or abuse;

• understand product usage;

• measure performance;

• diagnose technical issues; and

• where permitted, measure communications or marketing effectiveness.

The categories of technologies we use may include:

Strictly Necessary Technologies
Required for authentication, security, session management, and basic platform functionality.

Preference Technologies
Used to remember settings and preferences.

Analytics and Performance Technologies
Used to understand how the Services are used and improve stability and performance.

Marketing Technologies
Where permitted by applicable law, these may be used to understand the effectiveness of campaigns or communications.

Where legally required, non-essential cookies or similar technologies will be used only after obtaining appropriate consent.

You may also manage certain cookie controls through your browser or device settings.

4. Information We Obtain From Third Parties

We may receive information from third parties, including:

• Google and other authentication providers;

• wallet infrastructure providers;

• blockchain networks;

• blockchain data providers;

• decentralized protocols;

• analytics providers;

• security and fraud-prevention providers;

• payment providers;

• fiat on-ramp or off-ramp providers;

• identity verification providers;

• social networks where you authorize integration;

• public sources; and

• other users where they interact with you through the Services.

We process such information in accordance with this Privacy Policy and any applicable restrictions imposed by the source.

5. Google User Data

This section specifically describes how ripr handles information received through Google API Services, including Google Sign-In or Google OAuth authentication.

5.1 Information We Access From Google

If you choose to sign in to or connect ripr using your Google account, ripr may request access to information authorized by you.

Depending on the permissions presented to and approved by you, this may include:

• your Google account identifier;

• your name;

• your email address;

• your Google profile picture; and

• authentication information or OAuth tokens necessary to establish and maintain the authorized connection.

ripr only requests Google permissions that are necessary for functionality that is available to the user.

If ripr introduces functionality that requires access to additional Google user data, we will update our disclosures where necessary and request the appropriate authorization before obtaining that information.

5.2 How We Use Google User Data

Google user data obtained by ripr is used only as necessary to provide or improve user-facing features that you request, including:

• authenticating your identity;

• allowing you to sign in to ripr;

• creating your ripr account;

• linking your Google account with an existing ripr account;

• maintaining authenticated sessions;

• displaying account information that you have authorized;

• securing your account;

• preventing unauthorized access, fraud, or abuse;

• providing account support; and

• maintaining the functionality of the Google integration.

We do not use Google user data for purposes unrelated to the user-facing functionality for which access was granted.

5.3 Sharing of Google User Data

We do not sell Google user data.

We may disclose Google user data to service providers acting on our behalf only where reasonably necessary to:

• operate the Services;

• provide authentication infrastructure;

• host or store data;

• maintain system security;

• prevent fraud or abuse;

• provide customer support; or

• perform another user-facing function requested by you.

Such service providers may process the data only for the relevant permitted purpose and subject to appropriate contractual, confidentiality, and security obligations.

Google user data may also be disclosed where required by applicable law, legal process, regulatory requirement, or a valid governmental request.

5.4 Prohibited Uses of Google User Data

ripr does not use or transfer Google user data for:

• targeted advertising;

• personalized advertising;

• interest-based advertising;

• retargeted advertising;

• selling advertisements based on Google user data;

• sale to data brokers;

• sale or transfer to information resellers;

• determining creditworthiness;

• lending decisions;

• establishing databases for unrelated commercial purposes; or

• developing, improving, or training generalized or non-personalized artificial intelligence or machine-learning models.

Google user data is not transferred to third parties for those purposes.

5.5 Google API Services User Data Policy

ripr's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

Where Google Workspace APIs are used, data obtained through Google Workspace APIs will not be used to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.

5.6 Security of Google User Data

We use technical and organizational safeguards designed to protect Google user data against unauthorized or unlawful access, disclosure, alteration, destruction, or loss.

These safeguards may include:

• HTTPS/TLS encryption for data in transit;

• encryption at rest where appropriate;

• authentication and authorization controls;

• access restrictions based on operational need;

• secure token handling;

• credential and secret-management controls;

• monitoring and logging;

• infrastructure security controls; and

• procedures for detecting and responding to security incidents.

OAuth credentials and tokens are treated as sensitive authentication information and access is restricted accordingly.

5.7 Retention and Deletion of Google User Data

We retain Google-derived account information only for as long as reasonably necessary to:

• maintain your account or the Google integration;

• provide the feature for which access was authorized;

• protect the security and integrity of the Services;

• comply with applicable legal obligations;

• resolve disputes; or

• enforce applicable agreements.

When Google user data is no longer necessary for a permitted purpose, we delete, anonymize, or otherwise securely dispose of it unless retention is required or permitted by applicable law.

You may request deletion of Personal Data associated with your account by contacting us using the details in the Contact Us section of this Privacy Policy.

You may also revoke ripr's access to your Google account through your Google Account permissions or security settings.

Revoking Google access prevents ripr from obtaining additional information under the revoked authorization. Revocation by itself may not delete information previously provided to ripr. You may separately request deletion of eligible data held by ripr.

6. How We Use Personal Data

We may use Personal Data to:

• create and administer accounts;

• authenticate users;

• provide wallet connectivity;

• display blockchain and market information;

• facilitate user-requested trading functionality;

• display account, portfolio, position, or trading information;

• provide social and community features;

• operate content feeds;

• enable livestreaming or other content features;

• personalize product functionality;

• maintain user preferences;

• provide customer support;

• communicate service-related information;

• detect, investigate, and prevent fraud, spam, manipulation, abuse, or unauthorized activity;

• enforce our terms and policies;

• moderate content;

• protect users, the Services, and our infrastructure;

• troubleshoot technical issues;

• monitor reliability and performance;

• conduct analytics;

• develop and improve the Services;

• comply with laws and regulatory obligations;

• respond to lawful requests;

• establish, exercise, or defend legal claims; and

• complete a merger, acquisition, financing, restructuring, sale, or similar corporate transaction.

Where required by law, we rely on an appropriate lawful basis for each processing activity.

7. Legal Bases for Processing

Where laws such as the UK GDPR or EU GDPR apply, we may process Personal Data based on one or more of the following legal bases:

Performance of a Contract

Processing may be necessary to provide the Services you request or perform obligations under our agreement with you.

Consent

We may process information based on your consent where consent is required.

You may withdraw consent at any time, although this will not affect processing lawfully carried out before withdrawal.

Legitimate Interests

We may process information where necessary for legitimate interests such as:

• operating and securing the Services;

• preventing fraud or abuse;

• improving functionality;

• understanding product usage;

• protecting our legal rights; and

• communicating with users,

provided those interests are not overridden by applicable rights and interests.

Legal Obligations

We may process Personal Data where required to comply with applicable laws, regulations, court orders, sanctions obligations, financial crime requirements, or lawful governmental requests.

Protection of Vital Interests

In limited circumstances, processing may be necessary to protect an individual's life or physical safety.

8. How We Share Personal Data

We may disclose Personal Data to the following categories of recipients.

8.1 Service Providers

We may use service providers for services including:

• cloud infrastructure;

• hosting;

• database services;

• authentication;

• wallet infrastructure;

• data analytics;

• content delivery;

• cybersecurity;

• fraud detection;

• customer support;

• communications;

• payment processing;

• identity verification; and

• compliance services.

These providers may process Personal Data only as necessary to perform services on our behalf or as otherwise permitted by applicable law.

8.2 Blockchain Networks

When you initiate a blockchain transaction, information necessary to execute that transaction may be submitted to the applicable public blockchain.

Blockchain transactions are generally public and may be permanently accessible.

8.3 Third-Party Services You Choose to Use

If you choose to interact with or connect a third-party service through ripr, information may be transmitted to that service as necessary to perform your request.

The third party may independently process that information according to its own privacy policy.

8.4 Affiliates

We may share information with corporate affiliates where necessary to operate, secure, support, or administer the Services, subject to applicable law.

8.5 Legal and Safety Disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

• comply with applicable law;

• respond to lawful legal process;

• comply with a valid regulatory or governmental request;

• enforce our agreements;

• investigate fraud, abuse, or security incidents;

• protect our legal rights; or

• protect the rights, safety, or property of users or others.

8.6 Corporate Transactions

If ripr or Ravant Technologies FZCO is involved in a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable legal requirements.

8.7 Sale of Personal Data

We do not sell Personal Data for monetary consideration.

Where privacy laws define "sale" or "sharing" more broadly, you may have additional rights described under applicable law.

9. Public Information

Certain information on ripr may be public by design.

This may include:

• public profiles;

• usernames;

• avatars;

• posts;

• comments;

• livestreams;

• reactions;

• follows;

• public wallet addresses;

• blockchain transactions; and

• other information you intentionally make public.

Anyone may be able to view, save, reproduce, share, or otherwise use publicly available content.

Deleting content from ripr does not necessarily remove copies previously saved or redistributed by other users or third parties.

10. Blockchain Data and Immutability

Public blockchain networks operate independently of ripr.

Information written to a public blockchain may include:

• wallet addresses;

• transaction hashes;

• token transfers;

• smart-contract interactions; and

• other transaction details.

Blockchain records are typically distributed among independent network participants and may be immutable.

As a result, ripr generally cannot:

• alter blockchain records;

• delete transactions from a blockchain;

• erase a public wallet address from historical blockchain records; or

• reverse independently confirmed blockchain activity.

A request to delete information from ripr systems therefore does not result in deletion of information permanently recorded on a public blockchain.

11. Analytics

We may use analytics and performance-monitoring tools to understand how users interact with the Services.

These tools may process information such as:

• device information;

• IP address;

• session information;

• application events;

• page views;

• interactions; and

• diagnostic information.

Where required by applicable law, we obtain consent before activating non-essential analytics technologies.

12. Communications

We may send you:

Service Communications

These may include:

• account notices;

• security warnings;

• authentication messages;

• policy updates;

• transaction-related notices; and

• important changes to the Services.

You may not be able to opt out of communications that are necessary to provide or secure your account.

Marketing Communications

Where permitted by law, we may send information concerning products, features, promotions, or events.

You may unsubscribe from marketing communications using the mechanism provided in the relevant message.

13. Data Retention

We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide the Services;

• maintain your account;

• preserve security;

• prevent fraud;

• comply with legal and regulatory requirements;

• maintain necessary business records;

• resolve disputes;

• enforce agreements; and

• establish or defend legal claims.

Retention periods may vary depending on:

• the type of information;

• the reason for processing;

• applicable laws;

• security requirements; and

• whether an ongoing account or legal relationship exists.

When information is no longer required, we may delete, anonymize, aggregate, or securely destroy it.

Certain information may remain in encrypted backups for a limited period until backups are overwritten in accordance with our normal systems and disaster-recovery processes.

Public blockchain data is subject to the limitations described in the Blockchain Data and Immutability section.

14. Data Security

We maintain technical and organizational safeguards designed to protect Personal Data from:

• unauthorized access;

• unlawful processing;

• accidental loss;

• destruction;

• misuse;

• alteration; and

• unauthorized disclosure.

Our safeguards may include:

• encryption in transit;

• encryption at rest where appropriate;

• network security controls;

• access-control systems;

• authentication mechanisms;

• logging and monitoring;

• secure software-development practices;

• infrastructure protections;

• employee and contractor access restrictions; and

• incident-response procedures.

No internet-based or electronic system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality and security of your credentials, connected wallets, devices, and authentication methods.

15. International Data Transfers

ripr operates internationally.

Your information may therefore be stored or processed in countries other than the country in which you reside, including the United Arab Emirates and jurisdictions in which our infrastructure or service providers operate.

Privacy and data-protection laws in those jurisdictions may differ from those of your country.

Where applicable law requires safeguards for international transfers, we use appropriate mechanisms designed to ensure an adequate level of protection.

These may include:

• contractual protections;

• standard contractual clauses;

• adequacy mechanisms; or

• other legally recognized transfer safeguards.

16. Your Privacy Rights

Depending on where you live and the laws that apply to you, you may have the right to:

• request access to Personal Data we hold about you;

• obtain a copy of certain Personal Data;

• correct inaccurate or incomplete Personal Data;

• request deletion of Personal Data;

• request restriction of processing;

• object to certain processing;

• withdraw consent;

• request portability of eligible information;

• opt out of certain marketing communications;

• lodge a complaint with an applicable data-protection authority; and

• exercise other rights provided by applicable law.

These rights are not absolute and may be subject to legal exceptions.

For example, we may need to retain information where necessary to:

• comply with law;

• establish or defend legal claims;

• prevent fraud;

• maintain security; or

• comply with legally required record-retention obligations.

We may request information necessary to verify your identity before fulfilling a privacy request.

We will not discriminate against you for exercising privacy rights provided by applicable law.

17. Account and Data Deletion

You may request deletion of your account and eligible Personal Data by using an account-deletion feature made available within the Services, where available, or by contacting us using the details below.

Following a valid deletion request, we will delete, anonymize, or otherwise remove Personal Data that we are not required or permitted to retain.

Account deletion cannot:

• reverse completed blockchain transactions;

• delete information stored on public blockchain networks;

• delete copies of public content previously saved or redistributed by third parties; or

• require us to delete information that applicable law requires or permits us to retain.

18. Children

The Services are not intended for individuals under 18 years of age.

We do not knowingly permit individuals under 18 to create accounts or intentionally collect Personal Data from them through the Services.

If we become aware that we have collected Personal Data from a person under 18 in circumstances where such collection is not permitted, we will take reasonable steps to delete the information.

If you believe that a person under 18 has provided Personal Data to ripr, please contact us.

19. Third-Party Links and Services

The Services may contain links to or integrations with third-party websites, applications, protocols, wallets, platforms, or services.

We are not responsible for the privacy, security, content, or data practices of independent third parties.

Before providing Personal Data to a third party, you should review that party's privacy policy and terms.

20. Automated Systems and Artificial Intelligence

We may use automated technologies to assist with functions such as:

• fraud detection;

• spam prevention;

• security;

• content moderation;

• ranking or recommendation of platform content;

• market-data processing;

• customer support; and

• improving Service functionality.

Where applicable law provides rights in relation to decisions made solely through automated processing that produce legal or similarly significant effects, we will comply with those requirements.

For clarity, Google user data obtained through Google API Services is not used to train generalized or non-personalized AI or machine-learning models, as described in the Google User Data section above.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to the Services;

• new functionality;

• changes in our data practices;

• changes in technology;

• changes to third-party integrations; or

• legal or regulatory requirements.

When we make changes, we will update the Last Updated date at the top of this page.

Where required by law, or where a change materially alters how we use information previously collected from you, we will provide additional notice or obtain consent.

If we change how we access or use Google user data, we will update this Privacy Policy and provide any additional notice or authorization required by Google's policies or applicable law before using Google user data for the new purpose.

22. Complaints

If you have concerns regarding our handling of Personal Data, we encourage you to contact us first so that we can review the matter.

Depending on your jurisdiction, you may also have the right to submit a complaint to your local privacy or data-protection authority.

23. Contact Us

The operator and data controller for ripr is:

Ravant Technologies FZCO
Product: ripr
Website: ripr.trade
Registered Office: DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates
Trade License No.: 36692
Privacy Email: privacy@ripr.trade

If you contact us regarding a privacy request, please provide sufficient information for us to identify the relevant account and verify your request where necessary.

For security reasons, please never send us wallet seed phrases, private keys, passwords, or other credentials.