Privacy Policy — Evaluation Programme
Purpl Pulse Ltd · version 2026.08.17.1
This policy explains what we collect while you evaluate our software, why, and what you can ask us
to do about it. It covers the evaluation programme only. It sits alongside the Evaluation Terms of
Use; where the two overlap, the Terms govern the licence and this policy governs your data.
Who we are. Purpl Pulse Ltd is the data controller for the personal data described here. If you
want to reach us about anything in this document, use the contact address you were given with your
invite.
---
The short version
to know who holds it.
proves who agreed to what, and when.
It is not the place for them, and the Terms ask you not to.
---
1 · What we collect
1.1 What you tell us when you accept
At the moment you accept the Terms we record:
| What | Why |
|---|---|
| Your full name | The licence is granted to you personally; we have to be able to say who |
| Your work email address | To identify you, to reach you, and to send extension and expiry notices |
| The organisation you work for | To know the context you are evaluating in, and to spot one key being shared |
| Which version of the Terms you accepted, and a fingerprint of the exact text shown | So a later question about what you agreed to has a factual answer |
| The date and time | Same |
| The network (IP) address and browser the acceptance came from | Evidence about the circumstances of the acceptance |
| A one-way fingerprint of the invite key you used | So we can tell whether one key is being used by several people. We do not store the key itself |
1.2 What the software records while you use it
Where you have been given access over a private network, that network records which device connected
and when, in the ordinary way such networks do.
1.3 What you put in yourself
Anything you type, upload, draw or store while evaluating — pages, lists, files, briefs, test
records. This is your material. We hold it so the software can work.
Please keep real data out. The Terms ask you not to introduce production credentials, regulated
information, special-category personal data or anybody's real customer records. This is evaluation
software; it has not been through the processes that would make it a safe home for any of that. If
you put personal data in without agreeing it with us first, you are doing so outside what this
policy contemplates.
1.4 What we do not collect
The browser extension. Where you evaluate our browser extension, what it observes about the
pages you visit stays on your own machine unless you deliberately send something to a host. Read its
own guide for what it does and does not send.
---
2 · Why we are allowed to hold it, in law
We rely on legitimate interests (UK GDPR Article 6(1)(f)) for all of the above. Our interests
are: protecting technology we own, running a controlled evaluation, keeping a record of who agreed
to what, and improving the product. We have weighed those against your interests and concluded they
do not override them, because the data is limited to your professional identity and your use of the
software, you are told about it before you accept, and none of it is used to make decisions about
you personally.
Where we ever process personal data on your instructions — which the Terms say should not
normally happen — you are the controller and we are the processor, and we will agree the details in
writing before it starts.
Some records are kept because we may need them to establish or defend a legal claim.
---
3 · How long we keep it
| What | How long |
|---|---|
| Your acceptance record | For as long as we may need to rely on it, and for at least six years after your access ends — the ordinary limitation period for a contract claim in England and Wales |
| Your name, email and organisation | While you hold access, then within the acceptance record as above |
| Technical and security logs | Normally up to 12 months, longer only where a specific security or legal matter requires it |
| Material you put into the software | Until the evaluation ends, then deleted with the environment. Keep your own copy of anything you want to keep |
| Correspondence and feedback | While it remains useful to the product, and no longer than necessary |
The acceptance record is kept longer than everything else on purpose. It is the evidence that the
licence was granted on the terms it was granted on, and it loses its value the moment it is deleted.
---
4 · Who else sees it
Very few people, and no advertisers.
They hold data to run the service and for no purpose of their own.
confidentiality.
We do not sell, rent or trade personal data, and we never will under this programme.
Where any supplier is outside the UK, we make the transfer only on terms UK data protection law
permits — normally the UK International Data Transfer Addendum or an adequacy decision.
---
5 · Models and training
**We do not use your material, or your confidential information, as training, fine-tuning or
evaluation data for any model — ours or anybody else's — without your express permission.** This is
a commitment in the Terms as well as here, and it is one of the few things in the Terms for which
our liability is not capped.
We do use aggregated and de-identified information about how the software performed to improve it.
That means counts, timings and failure patterns — not your content, and nothing that identifies you.
---
6 · Security
yourself. Those are the two controls most likely to matter in practice, and they are yours to
keep rather than ours.
No system is perfectly secure, and this one is explicitly unfinished. Please do not store anything
in it that would hurt if it leaked.
---
7 · Your rights
Under UK data protection law you can ask us to:
the acceptance record itself while we may still need it to establish or defend a legal claim, and
we will tell you plainly if that is our answer.*
Ask using the contact address you were given with your invite. We will respond within one month. We
will not charge you, and we will not treat you any differently for asking.
If you are not satisfied, you can complain to the Information Commissioner's Office
(ico.org.uk), the UK supervisory authority. We would rather you came to us first so we can put it
right.
---
8 · Cookies and similar technologies
The evaluation software sets only what it needs to work:
are not asked again on every page. It carries your name, email, organisation and which version of
the Terms you accepted. It does not contain your invite key. It is signed, so it cannot be
forged, and it expires.
There are no advertising, profiling or cross-site tracking cookies, so there is no consent banner —
these are strictly necessary for a service you asked for.
---
9 · Changes
If we change this policy we will issue a new version and, where the change materially affects you,
tell you. The version at the top is how you tell which one you are reading.
---
*Purpl Pulse Ltd · Privacy Policy, Evaluation Programme · version 2026.08.17.1*