Is Rippling safe with your data?
Rippling
Rippling People Center, Inc.
Partial disclosure · high confidence
Rippling earns a C (58/100) because it discloses its data practices only in part.
#109
of 177 apps ranked
58
score · HR & recruiting avg 65
-7
vs category average
Rippling's user privacy notice lists a full set of data-subject rights, names an international transfer safeguard, and maps a legal basis to each processing purpose. It says nothing about model training and gives no concrete retention period or deletion timeline, which keeps it in the middle band. The advertising disclosures that CCPA may treat as a sale or share have a named opt-out through Your Privacy Choices, so they avoid a dealbreaker.
What Rippling's privacy policy says about your data
Full data-subject rights
Section 9 grants access, correction, deletion, restriction, objection, portability, and consent withdrawal, plus a CCPA opt-out for sale and sharing exercised through Your Privacy Choices.
Named transfer safeguard
The international transfers section commits to adopt approved standard contractual clauses or consent when exporting data from restricted jurisdictions.
Retention left vague
The policy keeps data as long as required to fulfill the relevant purposes and gives no day count or deletion timeline, so retention and deletion timing score low.
Silent on training and breach
The notice never addresses using personal information to train models and states no breach-notification commitment or timeframe.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Rippling privacy rating
Details
- Category
- HR & recruiting
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2025-03-14
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Other hr & recruiting apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.