Privacy policy

Last updated: April 2026

1. What we collect

We collect information you provide during registration (company name, full name, work email) and organisational data you submit through the AIRA assessment process, including process descriptions, technology inventories, and workforce profiles. We also collect usage analytics such as page views, feature engagement, and session duration.

2. How we use it

Your data is used to deliver AIRA assessments, generate PRISM scores, and produce AI diffusion plans for your organisation. We use aggregated, anonymised analytics to improve the platform. We do not use your organisational data to train machine learning models.

3. Data isolation

All tenant data is logically isolated using row-level security policies. Each organisation's data is accessible only to authenticated users within that tenant. Platform administrators cannot access tenant data without explicit authorisation and audit logging.

4. Data storage

Data is stored in Azure datacentres located in the Central India region. All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Database backups are encrypted and retained for disaster recovery purposes.

5. Data retention

Active account data is retained for the duration of your subscription. Upon account termination, data is retained for 90 days to allow for export, after which it is permanently deleted. Audit logs are retained for 12 months for compliance purposes.

6. Third parties

We use Stripe for payment processing and Keycloak for identity management. These services process only the minimum data necessary for their function. We do not sell, share, or provide your organisational data to any third party for marketing or analytics purposes.

7. Your rights

You have the right to access, correct, or delete your personal data. You may request a full export of your organisational data at any time. You may withdraw consent for non-essential data processing. To exercise these rights, contact cortex@purplelab.ai.

8. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand platform usage patterns. You may disable non-essential cookies through your browser settings. We do not use third-party advertising cookies.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to the account administrator. Continued use of the platform after notification constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries, contact:
PurpleLab AI Ltd
Email: cortex@purplelab.ai
Website: purplelab.ai