Privacy Policy

1. Core Brand Promise

All tools work without an account. Accounts are optional and store only business profiles and dynamic QR links. Documents, invoices and tool data are never uploaded.

Ripitoo processes file transformations (including PDF merging/splitting, image compression, text formatting, and cryptographic calculations) 100% locally within your client browser memory. Uploaded files, calculations, and tool inputs NEVER leave your device.

2. Optional Accounts for Profiles & Dynamic QRs Only

Every utility on Ripitoo remains completely usable with NO account or login required. Accounts are strictly optional and exist exclusively to:

• Store up to 3 business profiles with logos to enable 1-click autofill in invoice, receipt, and payment tools.
• Manage up to 5 dynamic QR codes with short redirects (/q/{id}) and scan count analytics.
• Power role-gated administrative features.

3. What Account Data We Process

When you create an optional account, we store:

• Identity: Email address, salt-derived password hash (scrypt/PBKDF2), and two-factor authentication TOTP secret (if enabled).
• Business Profiles: Business name, tax ID, PAN, address, phone, email, and compressed logo image (≤150 KB).
• Dynamic QRs: Destination URLs and scan count counters (no IPs or User Agents stored).

4. Zero Third-Party Tracking Cookies

We do not sell your personal data or deploy third-party tracking cookies to profile your behavior for advertising. Authentication session tokens are stored in secure, HttpOnly, SameSite cookies.

5. GDPR & DPDP (India) Rights: Export & Deletion

You retain absolute sovereignty over your data. Under GDPR, DPDP (India), and CCPA:
• Data Portability: You can export a comprehensive JSON archive of your business profiles and dynamic QR links at any time.
• Right to Erasure: You can immediately and permanently delete your account, business profiles, and dynamic QR records from your account settings.