Privacy policy
Last updated 9 August 2026
This policy covers ribo.bio. It describes what the site collects, why, and what you can do about it. We have tried to keep it to what is true rather than what is customary.
What we collect
Product and analytics data. We use PostHog and Vercel Analytics to understand how the site is used. Between them these record your IP address, approximate location derived from it, browser and device type, referring page, and the pages and elements you interact with. PostHog is also configured to record sessions, which captures your interactions with pages as a replayable view.
What you send us. The form on this site asks for your name and work email, and optionally your company, your headcount, and why you are getting in touch. We use those to reply and to come to the call with context, and nothing else.
Booking data.When you book a call, that happens on Calendly. Any name, email address, and scheduling detail you enter is given to Calendly and passed to us, and is covered by Calendly’s own privacy policy.
Email. If you write to us, we hold your message and address for as long as we need it to reply and to keep a record of the conversation.
Why we are allowed to
We rely on legitimate interests to run and improve the site, and to reply when you contact us. Where consent is required for analytics or session recording in your jurisdiction, we rely on consent and you can withdraw it at any time by asking us, or by enabling Do Not Track or an equivalent control in your browser.
Who we share it with
We do not sell personal data and we do not share it for advertising. We use the following processors, each of which handles data on our instructions:
- Vercel, for hosting and site analytics
- PostHog, for product analytics and session recording
- Calendly, for scheduling
- Resend, for sending email
Some of these process data outside the UK and the EEA. Where that happens we rely on the transfer safeguards those providers put in place, such as standard contractual clauses.
How long we keep it
Analytics and session recordings are retained on our providers’ default schedules and are deleted after that. Email and booking records are kept for as long as the relationship is live, and then for as long as we need them for our own records.
Your rights
Depending on where you live you can ask us for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Write to hugo@first-ocean.com and we will answer within a month. If you are in the UK or the EEA and you are not satisfied with our answer, you can complain to your data protection authority.
Contact
Questions about this policy go to hugo@first-ocean.com.