Key Facts
What notice does Ramp provide regarding material changes?
Ramp will provide reasonable advanced notice of material changes to its collection, use, or disclosure of Personal Information before those changes take effect for the user.
What does Ramp acknowledge under California law?
Ramp acknowledges that, under California law, certain marketing practices—specifically the disclosure of website visitor data to obtain targeted ads and analytics to advertise on third-party sites—may be considered a 'share' or 'sale' of Personal Information.
May the disclosure of website visitor data to obtain targeted ads be considered a 'sale' of Personal Information?
Ramp acknowledges that, under California law, certain marketing practices—specifically the disclosure of website visitor data to obtain targeted ads and analytics to advertise on third-party sites—may be considered a 'share' or 'sale' of Personal Information.
What rights does Ramp grant to California users?
Ramp grants California users the right, subject to certain exceptions, to request correction of inaccurate Personal Information or deletion of Personal Information Ramp has collected from them.
What is Connected Data?
Ramp collects Connected Data—information and documentation made available through Third-Party Services connected to its Services—which may include Personal Information such as business expenses and a Company's external transactions.
What may Connected Data include?
Ramp collects Connected Data—information and documentation made available through Third-Party Services connected to its Services—which may include Personal Information such as business expenses and a Company's external transactions.
What is included in Identity Verification & Risk Information that Ramp collects?
Ramp collects Identity Verification & Risk Information, which includes personal identifiers such as name, email address, phone number, employer, job title, date of birth, residential address, country of citizenship, photograph, social security number, driver's license, and passport.
When does Ramp process Personal Information as a Controller?
Ramp processes Personal Information as a Controller when users use or interact with its corporate card and expense management, travel, and procurement services.
In accordance with what does Ramp process Personal Information on behalf of a Company?
When Ramp processes Personal Information on behalf of a Company to provide contracted Services, it does so in accordance with the Agreement and the Customer's instructions, not this Privacy Policy.
How long does Ramp retain Personal Information?
Ramp retains Personal Information for as long as it has a business or operational purpose to retain it and as necessary to comply with legal or regulatory obligations, resolve disputes, prevent fraud, and enforce its rights.
5 important changes detected
7 versions captured · Last updated: September 2026
What changed
Ramp updated their Ramp Privacy Policy on September 12, 2026. Change detected: 1 sentence(s) modified. Document contained 421 sentences after update.
View full change record →
What changed
Ramp's Privacy Policy was reorganized and reworded in an update detected on August 22, 2026, shifting from 'Personal Information' terminology to 'Personal Data' throughout. The policy's section structure was revised, a new section on Automated Decision-Making and Artificial Intelligence was introduced at section 10, and scope language was updated to reflect expanded service offerings including banking, accounts receivable, and Token Spend Management. The substantive obligations and data processing practices remain similar, but the policy's structural organization and terminology changed materially.
Why this matters
The updated policy retains core data processing practices but introduces formal disclosure of Automated Decision-Making and Artificial Intelligence procedures at section 10, reflects expanded service offerings including banking and accounts receivable functionality, and reorganizes policy sections for clarity. Terminology changed from 'Personal Information' to 'Personal Data' throughout to align with data protection regulatory conventions. The substantive rights and obligations for users remain operationally similar, though the explicit AI and automated decision-making disclosure creates new transparency expectations.
View full change record →
August 15, 2026
low
Ramp removed hyperlinks from two references to California privacy notices in their privacy policy. The previous version linked directly to internal policy anchors for the Notice of Financial Incentives and …
View change record →
August 1, 2026
low
Ramp's UK privacy notice was revised to clarify its role in regulated financial services. The previous language stated Ramp provides regulated account information services as an agent of Plaid Financial …
View change record →
July 25, 2026
low
In an update detected on July 25, 2026, Ramp added a new 'Additional Information for UK Residents' section to its privacy policy. The new section discloses that Ramp provides regulated …
View change record →
Archival ProvenanceSource & Archival Record
Last Captured
September 12, 2026 01:02 UTC
Capture Method
Automated scheduled archival capture
Document ID
CA-D-000532
Version ID
CA-V-006907
SHA-256
e0653d4f212f0614716b0742c4cbb1ea3ae5acd113c3a06e417101b01e152f61
✓ Snapshot stored
✓ Text extracted
✓ Change verified
✓ Hash verified