(TL;DR: they also probably earn money from your data)
> We share Personal Data with Third-Party Service Providers or as requested by a Company or its Employees. We also share Personal Data with regulators, law enforcement, financial services providers, or other authorized third parties as required by law.
> We may reasonably transform Personal Data into De-identified Data by anonymizing it or by aggregating or combining it with other data to mask its relation to particular individuals. De-Identified Data is no longer Personal Data and we may use De-Identified Data and share it publicly or with third parties without your permission.
> We may add or change how or when we use affiliates or third parties to process Personal Data without notifying you, except that any use of Personal Data will be consistent with this Privacy Policy.
Their pricing pages says that everything is $0 (free).
https://ramp.com/pricing