The short version. Purple8 is embedded, self-hosted software. The data you ingest, index, and query — your documents, graphs, vectors, and workflows — is processed inside your own deployment and is never sent to Purple8. This policy covers the limited information we collect when you visit our website, register for an account, or purchase a licence.
1. Who we are
This Privacy Policy is issued by Purple8, Inc., a Delaware corporation (“Purple8”, “we”, “us”, or “our”). It applies to the website purple8.ai and related Purple8-operated services (together, the “Site”), and explains what we do with information relating to you.
2. The most important point: your operational data
Purple8 Hyper Graph and Purple8 DocIntel run in your own environment — your hardware, your cloud, or your on-premises infrastructure. The content you process with the Software (documents, entities, embeddings, graph data, prompts, and query results) is stored and processed locally within your deployment. Purple8 does not receive, collect, store, or have access to that operational data. Where you configure a third-party model provider (for example, an LLM API), your data flows directly from your deployment to that provider under their terms — not through Purple8.
3. Information we do collect
We collect a limited amount of information in connection with the Site and our commercial relationship with you:
- Account & registration data — name, work email, company, and the plan or edition you select.
- Billing data — processed by our payment provider (Stripe). We receive confirmation of a transaction and limited billing metadata; we do not store full card numbers.
- Licence & activation data — the licence key issued to you and non-content metadata needed to validate it (such as tier and expiry).
- Support & communications — messages you send us (support tickets, email, or waitlist sign-ups) and our replies.
- Site usage data — basic, aggregated analytics and server logs (such as pages viewed and approximate region) used to keep the Site secure and improve it.
4. How we use information
- To create and manage your account and issue licences.
- To process payments and provide receipts.
- To provide support and respond to your enquiries.
- To send you service and transactional messages (for example, licence, security, or billing notices).
- To operate, secure, and improve the Site and our products, and to meet legal and accounting obligations.
5. Legal bases
Where applicable law (such as the UK GDPR or EU GDPR) requires a legal basis, we rely on: performance of a contract (to provide the account, licence, and support you request); our legitimate interests (to secure and improve the Site); consent (for optional marketing, which you can withdraw at any time); and compliance with legal obligations.
6. Sharing
We do not sell your personal information. We share limited information only with service providers who help us run our business, under appropriate contractual protections:
- Payments — Stripe, for billing and fraud prevention.
- Infrastructure & hosting — providers that host the Site and our email/support systems.
- Legal — where required by law, regulation, legal process, or to protect our rights, users, or the public.
7. International transfers
Purple8 is based in the United States. Where information is transferred internationally, we use appropriate safeguards (such as Standard Contractual Clauses) where required.
8. Retention
We keep account, licence, and billing records for as long as your account is active and as needed to comply with legal, tax, and accounting requirements, after which we delete or anonymise them.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact us at privacy@purple8.ai. You also have the right to complain to your local data protection authority.
10. Security
We use technical and organisational measures appropriate to the limited data we hold. Because your operational data stays within your own deployment, you remain the controller of, and are responsible for securing, that data — for which the Software provides encryption at rest, RBAC, tenancy isolation, and audit controls.
11. Children
The Site and Software are not directed to children and are not intended for use by anyone under 16. We do not knowingly collect information from children.
12. Changes
We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Effective” date above. Material changes will be communicated where appropriate.
13. Contact
Questions about this policy or your information? Contact privacy@purple8.ai.
Purple8, Inc. · 1111B South Governors Avenue, Suite 24066, Dover, DE 19904, USA · legal@purple8.ai