Privacy Policy

LAST UPDATED: 19 February 2026

Ripple Science Corporation (“Ripple”), d.b.a EnrollNow, provides patient engagement workflow software to the clinical and academic research community. Our products and services, including websites, apps, events, and activities (together “Services”), enable human subject clinical and translational research and facilitate the research trial process.

This Privacy Policy describes how we collect, use, disclose, and otherwise process personal information in connection with our Services. 

Our Services are intended for business users. To the extent relevant under applicable data protection requirements, we treat the information of individuals who interact with those Services as pertaining to business representatives, and not to individuals acting in their personal capacity.

This Privacy Policy does not apply to our processing of personal information in our capacity as a service provider (or processor) to our enterprise customers. This may include the personal information of patients, clinical trial participants, researchers, healthcare professionals, study staff, and other individuals. Where we process personal information on behalf of our customers, we do so pursuant to our agreements with those customers. 

What Personal Information Does Ripple Collect?

When you access the Services, the following types of personal information may be collected from you or your device:

Contact information, such as your first and last name, physical address, email address, country, and phone number;

Services account information, such as your username and password, user configurations, products, and usage information;

Customer communities and forums information, such as information that you create, input, submit, post, upload, transmit, store, or display on forums on any of our Services or as part of live or online affinity group communities led by Ripple;

Information from communications that we retain from any support requests you submit, submission or inquiries about job opportunities, etc.; and

Information from cookies and other automated technologies, such as information about the devices you use to engage with our Services, and online activity data. 

Due to the nature of the Services provided, in some cases, if you choose not to provide us with required information for the Services you want to use, you may not be able to access or utilize those Services. 

How Does Ripple Use Personal Information?

We use collected personal information for the following purposes:

• Provide, operate, secure, and improve our Services and our business;

• Communicate with you about our Services, including by sending announcements, updates, security alerts, and support and administrative messages;

• Understand clients and their individual needs and interests to personalize experiences within the Services and recommend additional Services;

• Provide support and respond to requests, questions, and feedback;

• Market and advertise to our customers and prospective customers, subject to consent and specific local regulatory requirements;

• Develop features, products, and services by understanding the needs of our customers and the use of our Services; 

• Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;

• Protect our, your, or others’ rights, privacy, safety, or property (including by making and defending legal claims);

• Audit our internal processes for compliance with legal and contractual requirements and internal policies;

• Enforce the terms and conditions that govern our Services; and

• Prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft.

Legal Bases for Processing

We will only use your personal information if we have a valid legal ground for the processing, including:

Consent. This basis is used when you have consented to the use of your personal information, for example, for certain marketing and advertising purposes.

Contract. In order to perform our contractual obligation with you, we need to use personal information for some functions, including account management, customer support inquiries and responses, and to ensure the security of your account and data.

Legitimate Interest. We only rely on legitimate interest as a legal basis when such legitimate interests are not overridden by your interests or your fundamental rights and freedoms, and we ensure we comply with any request you make to exercise your rights.

Legal Obligation. We may have a legal requirement to process your personal information when dealing with establishing, exercising, or defending legal claims. We may also process your personal information when necessary to protect your or another individual’s vital interests.

Traffic and Performance Analytics

For the purposes of maintaining service reliability, performance levels, monitoring for malicious patterns, better understanding usage of our Services, and improving overall user experience, Ripple tracks various systems analytics such as server statistics, response times, request types, error rates, heavily used links, source IPs, geographic locations, etc.

Our website and service use Google Analytics, a service which transmits website traffic data to Google servers in the United States. Google Analytics does not identify individual users or associate your IP address with any other data held by Google. We use reports provided by Google Analytics to help us understand website traffic and web page usage. You may choose to opt-out of Google Analytics data collection by activating the Google Analytics Opt-out Browser Add-on:

https://tools.google.com/dlpage/gaoptout?hl=en.

How Does Ripple Share Personal Information?

We share personal information with:

• Service providers. Companies and individuals that help us provide our Services or perform services on our behalf (e.g., web hosting, customer support, or messaging and collaboration).

• Marketing vendors. Third-party advertising companies that provide advertising services to us can collect information on our website through cookies and other automated technologies.

• Legal authorities. Law enforcement, government authorities, and private parties, as required to comply or fulfill those obligations, we find to be legitimately served.

• Business partners. Potential and actual investors, acquirers, and other relevant participants in business transactions involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale, or other disposition of all or any portion of the business or assets of, or equity interests in, Ripple. 

Your Privacy Rights and Choices

Ripple provides the following options related to personal information for those who use or interact with our Services:

Opt-out. You can opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the emails you receive from us. If you are a user of our Services, you will continue to receive operational and other non-marketing emails until you cancel your use of our Services.

• Request. You may request that we provide you with the information about you that we hold and process.

• Delete. You may request that we delete the personal information that we maintain about the individual, except when we are legally required to retain that information.

• Correct. You may request that we update or correct inaccuracies in your personal information.

• Transfer. You may request that we provide an electronic, machine-readable version of the personal information we hold to another individual or third-party entity.

• Restrict. You may request that we restrict the processing (including sharing) of your personal information, including the sharing of your personal information with our customers.

• Object. You may object to (a) our reliance on our legitimate interests as the basis of our processing of the individual’s personal information that impacts their rights and (b) decisions being made with the individual’s personal information solely based on automated decision-making and profiling.

You are entitled to exercise all rights described in the Privacy Choices section free from discrimination.

We reserve the right to request information to confirm the identity of the requester of the above-listed choices

Third Party Services

This Policy does not apply to websites or other domains that are maintained or operated by third parties or our affiliates.  Our Services may link to third-party websites and services. These links are not endorsements of these sites, and this Policy does not extend to them.  Because this Policy is not enforced on these third-party websites, we encourage you to read any posted privacy policy of the third-party website before using the service or site and providing any information.  

Retention

We retain personal information for as long as appropriate to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we process personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Cross-Border Processing of Personal Information 

If you provide us with your personal information when using the Services, then please note that we are headquartered in the United States. To provide and operate our Services, it is necessary for us to process personal information in the United States. 

Changes To This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you, for example, by posting the Privacy Policy on our Services. 

Contact Us

For privacy matters, you can contact Ripple by email at privacy@enrollnow.io or at the following mailing address:

Ripple Science Corporation

Attention: Privacy Officer
Ripple Science Corporation
P.O. Box 7909
Ann Arbor, Michigan 48107

If you have questions, comments, or complaints about Ripple’s data practices, you can email our Data Protection Officer at privacy@enrollnow.io.