Privacy Policy

Blurredlabs LLC ("Blurredlabs", "we", "us", or "our") operates the Hollowpurple platform at hpurple.com. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service. It also describes your rights regarding that information.

By using the Service you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information you provide directly

• Account data: name, email address, password (stored in hashed form), company name, and profile picture.
• Billing data: payment method details (processed and stored by our payment processor; we do not store full card numbers).
• Content you create: projects, tasks, invoices, CRM records, client portal content, messages, and any files you upload.
• Communications: emails and messages you send to our support or sales team.

1.2 Information collected automatically

• Usage data: pages visited, features used, timestamps, and actions taken within the Service.
• Device and log data: IP address, browser type and version, operating system, referring URLs, and error logs.
• Cookies and similar technologies: session cookies (required for authentication), preference cookies (e.g. dark mode), and analytics cookies. See Section 7 for details.

1.3 Information from third parties

• OAuth / SSO providers: if you sign in via Google or another identity provider, we receive your name, email, and profile picture from that provider.
• Payment processors: we receive transaction confirmations and limited billing details (e.g. last four digits, card brand) from our payment processor.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service;
• Process payments and send billing-related communications;
• Send transactional emails (account verification, password reset, invoices);
• Send product updates and marketing communications where you have consented or where permitted by law;
• Respond to support requests and enquiries;
• Detect, investigate, and prevent fraud, abuse, or security incidents;
• Comply with applicable legal obligations;
• Conduct analytics to understand how the Service is used and to improve it.

3. Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area or United Kingdom, we process your personal data on the following legal bases:

• Contract performance: to provide the Service you have signed up for.
• Legitimate interests: for analytics, fraud prevention, and improving the Service, where these interests are not overridden by your rights.
• Consent: for optional marketing communications and non-essential cookies.
• Legal obligation: where required by law (e.g. retaining billing records).

4. Sharing Your Information

We do not sell your personal information. We share it only in the following circumstances:

• Service providers: trusted sub-processors (cloud hosting, payment processing, email delivery, analytics) who are bound by data processing agreements and may only process data on our behalf.
• Within your Organisation: data you create in a shared workspace is visible to other members of that Organisation as configured by the workspace Owner.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice provided where legally required.
• Legal compliance: where required by law, court order, or government authority, or to protect the rights, property, or safety of Blurredlabs, our users, or the public.

5. Data Retention

We retain account data for as long as your account is active and for a reasonable period afterwards to allow account reactivation and to fulfil legal obligations. Deleted content is removed from active systems promptly and from backups within 90 days. Billing records are retained for up to 7 years as required by financial regulations.

6. Data Security

We implement industry-standard technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, audit logging, and regular security reviews. No system is completely secure, however, and we cannot guarantee absolute security. Please notify us immediately at info@hpurple.com if you believe your account has been compromised.

7. Cookies

We use the following categories of cookies:

• Strictly necessary: session and CSRF cookies required for the Service to function. These cannot be disabled.
• Functional: preference cookies (e.g. appearance settings). Stored locally and not shared.
• Analytics: anonymous usage statistics to help us understand how the Service is used. You may opt out through your browser settings or a cookie preference centre (where available).

Most browsers allow you to control cookies through their settings. Disabling strictly necessary cookies will prevent the Service from working correctly.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your personal data (subject to legal retention obligations).
• Restriction: ask us to limit how we process your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests, including for direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@hpurple.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. International Transfers

Your data may be processed in the United States or other countries where our service providers operate. Where data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses or other appropriate safeguards approved by the relevant regulatory authorities.

10. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service at least 14 days before changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For questions, concerns, or to exercise your data rights, please contact our privacy team:

Blurredlabs LLC
Email: info@hpurple.com
Contact form