purplepath.io
Effective Date: 13 July 2026
This Privacy Notice outlines thetypes of personal data that purple path collects, the purposes for which wecollect that data, our legal basis for processing, how we protect your data,and your rights regarding your personal data. This notice applies to allpersonal data collected through our website purplepath.io or when you use ourservices.
Controller: purple path GmbH
• Contact Email for Privacy Matters: hello@purplepath.io
• Website: www.purplepath.io
We collect the following personalinformation from you:
• Identifying Information:This includes your email address, firstname, last name, phone number, and company name.
• Usage Data: Information about how you interact with our website,including pages visited, time spent, and actions taken.
• Technical Data: IP address, browser type and version, device type, andoperating system.
• AI Chat Assistant Data: When you use the AI chatassistant on our website, we collect the content of the messages you send, anybusiness information you share in that conversation (such as company size,funding stage, sales motion, or product stage), and, only if you choose to providethem, your name and email address.
We process your personal data forthe following purposes:
• Service Delivery: To provide and manage the services you have requestedfrom us.
• Service Improvement: To enhance the quality of our services based on userfeedback and interaction.
• Web Analytics: To understand how our website is used, enabling us tooptimise the user experience (via Google Analytics).
• Marketing: To communicate with you about our services, promotions,and news that might be of interest to you, where you have consented or where wehave a legitimate interest in doing so.
• AI-Assisted Lead Qualification: To haveconversations with website visitors through our AI chat assistant, understandwhether our services may be a good fit for your business based on informationyou share, and, where appropriate, follow up with you or direct you to speakwith our team.
Our legal basis for processingyour personal data under the UK GDPR and EU GDPR includes:
• Consent: Where you have given clear consent toprocess your personal data for a specific purpose, such as receiving marketingcommunications.
• Contractual Necessity: Processing is necessaryfor the performance of a contract to which you are a party, or in order to takesteps at your request before entering into a contract.
• Legitimate Interests: We may process your datawhen it is reasonably necessary to achieve our legitimate business interests,such as improving our services, conducting web analytics, operating our AI chatassistant to identify whether visitors may be a good fit for our services, anddirect marketing, provided these interests are not overridden by your rights.
• Legal Obligation: Where processing is necessaryto comply with a legal obligation we are subject to.
We may share your personal datawith the following categories of third parties:
We use Google Analytics toanalyse website usage. Google may process data outside the EU; please referto Google's own privacy policy for details.• Analytics Providers: We use Google Analytics toanalyse website usage. Google may process data outside the EU/UK; please referto Google's own privacy policy for details.
• AI and Hosting Sub-processors: We use thefollowing providers to operate our AI chat assistant and store related data: Lovable (application development and hosting platform), Supabase (databasehosting), OpenAI (text embedding processing that powers search within the chatassistant), and Anthropic (the underlying AI model that generatesconversational responses). These providers process personal data on our behalfunder appropriate data processing agreements and are contractually restrictedfrom using your data for their own purposes.
• Service Providers: Trusted third-party vendorswho assist us in operating our website and delivering our services, subject toappropriate data processing agreements.
Your personal data will not besold to or shared with any other third parties, except as required by law.
purple path is based within theEuropean Union. Where we transfer personal data outside of the EU, for example, through the use of Google Analytics, or our AI and hosting sub-processors such as OpenAI and Anthropic, which are based in the UnitedStates, we ensure appropriate safeguards are in place, such as the use of Standard Contractual Clauses (SCCs) or adequacy decisions, in accordance with applicable data protection law.
We retain personal data only foras long as is necessary to fulfil the purposes for which it was collected,including for the purposes of satisfying any legal, accounting, or reporting requirements. When data is no longer needed, it is securely deleted oranonymised.
AI chat assistant conversation transcripts and associated qualification information are retained for 12 months from the date of your last interaction, after which they are deleted or anonymised, unless a longer period is necessary to pursue a business relationship you have initiated with us or to comply with a legal obligation.
Under the UK GDPR and EU GDPR,you have the following rights concerning your personal data:
• Right of Access: You can request a copy of thepersonal data we hold about you.
• Right to Rectification: You may correct anyinaccurate or incomplete personal data we hold.
• Right to Erasure: You can request the deletionof your personal data, under certain conditions (also known as the 'right to beforgotten').
• Right to Restrict Processing: You have the rightto request that we limit the way we use your personal data.
• Right to Data Portability: You can request thetransfer of your personal data to another organisation or to yourself in acommonly used, machine-readable format.
• Right to Object: You may object to theprocessing of your personal data where we rely on legitimate interests as ourlegal basis.
• Rights related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal or similarly significant effects. Our AI chat assistant may assess whether your business appears to fitour target customer profile, but this assessment does not itself grant or deny you access to any service, and any decision to enter into a commercial relationship is made by our team, not by the AI assistant.
To exercise any of these rights,please contact us at hello@purplepath.io. We will respond to your requestwithin one month. You also have the right to lodge a complaint with your localsupervisory authority (for example, the ICO in the UK or the relevant DataProtection Authority in your EU member state).
We implement robust technical andorganisational measures to protect your personal data against unauthorised orunlawful processing, accidental loss, destruction, or damage. These measuresinclude encryption, access controls, and regular security reviews.
Our website uses cookies toenhance your experience. Specifically, we use:
• Essential Cookies: Required for the basicoperation of our website.
• Analytics Cookies (Google Analytics): Used tounderstand how visitors interact with our website, allowing us to improve theuser experience. These cookies collect information in an anonymised form. Youmay opt out of Google Analytics tracking by using the Google Analytics Opt-outBrowser Add-on.
• AI Chat Session Identifier: Our AI chatassistant uses a session identifier to maintain the context of your conversation during your visit. This identifier is used only to operate thechat assistant and is not used for cross-site tracking or advertising.
By continuing to use ourwebsite, you consent to the use of cookies in accordance with this notice. You can manage your cookie preferences through your browser settings at any time.
We may update this Privacy Noticefrom time to time to reflect changes in our practices or applicable law. Themost current version will govern our processing of your personal data and willalways be available on our website at purplepath.io. We will notify you of anymaterial changes where required by law.
If you have any questions aboutthis Privacy Notice or our data protection practices, please contact us:
Contact us at: hello@purplepath.io