Legal
Privacy policy
Transparent handling of personal data is important to us. This privacy policy explains what personal data we process when you visit purpurlab.ai, contact us, or subscribe to our newsletter, why we process it, and which rights you have.
Last updated: 17 July 2026
1. Who is responsible?
Purpur Lab GmbH, Grienbachstrasse 17, 6300 Zug, Switzerland, is responsible for processing personal data on this website. You can contact us through the contact form on this website or at info@purpur.ventures.
We process personal data in accordance with applicable data protection law, in particular the Swiss Federal Act on Data Protection. Where applicable, we also observe the EU General Data Protection Regulation.
2. What data do we process?
Website visits
When you access this website, our hosting and infrastructure providers may process technical information required to deliver and secure the website. This may include your IP address, date and time of access, requested page, referrer URL, browser, operating system, device information, and diagnostic or security events.
Contact form
When you use the contact form, we process the information you provide, including your inquiry type, name, email address, and message. Your phone number and company are processed only if you provide them. We use this information to review your inquiry, respond to you, and take any requested pre-contractual steps.
Newsletter
When you subscribe to the newsletter, we process your email address and information needed to document and operate the subscription. We use a double opt-in process, which means that the subscription is activated only after you confirm your email address. You may unsubscribe at any time using the link in each newsletter.
Language preference
We store your selected language in a necessary cookie named PURPUR_LOCALE for up to one year. This lets us show the website in your preferred language on later visits. The website can be used without advertising cookies.
3. Why and on what basis do we process data?
We process personal data only for defined purposes and to the extent necessary. Depending on the situation, processing is based on your consent, the preparation or performance of a contract, compliance with legal obligations, or our legitimate interests.
Our purposes include:
- providing, operating, and securing this website;
- responding to inquiries and developing business relationships;
- sending the newsletter to people who have requested it;
- understanding aggregate website usage and improving our content and services;
- preventing misuse, investigating faults, and asserting or defending legal claims.
4. Which service providers receive data?
We use carefully selected service providers that process data on our behalf or under their own responsibility. They receive only the data needed for their services and are subject to contractual and legal confidentiality and data protection obligations.
Vercel
The website is hosted on Vercel. Vercel processes technical request, security, and diagnostic data to deliver and protect the website. We also use Vercel Web Analytics to measure privacy-friendly, aggregated website usage without using tracking cookies.
Neon and Payload CMS
Website content and administrative data are managed with Payload CMS and stored in a PostgreSQL database provided by Neon. These systems are used to operate and maintain the website. Public contact form messages are not stored in Payload CMS.
Resend
Contact form submissions are sent to us through the email delivery provider Resend. Resend processes the contact details and message content needed to deliver the email.
Brevo
Newsletter subscriptions and delivery are handled through Brevo. Brevo processes your email address, subscription status, and technical delivery and interaction data needed to operate the newsletter and document your consent.
5. Is data transferred abroad?
Some service providers or their subcontractors may process data outside Switzerland or the European Economic Area, including in the United States. If a recipient country does not provide an adequate level of data protection, we rely on appropriate safeguards such as recognised standard contractual clauses, unless a legal exception applies.
6. How long do we retain data?
We retain personal data only for as long as necessary for the purpose for which it was collected, while a business relationship exists, or while legal retention, evidence, and limitation periods require it. Technical logs are generally retained for shorter operational and security periods. Contact correspondence may be retained for the duration of the business relationship and applicable legal periods. Newsletter data is retained until you unsubscribe and for as long as needed to document consent or comply with legal obligations.
7. How do we protect data?
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure, or access. These measures include encrypted transmission, access controls, restricted permissions, and the use of established infrastructure providers. No method of transmission or storage is completely secure.
8. What rights do you have?
Subject to applicable law, you may request information about your personal data, correction of inaccurate data, deletion, restriction of processing, release or transfer of certain data, or object to processing. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, contact us using the details in section 1. We may need to verify your identity. You also have the right to contact the competent data protection authority. In Switzerland, this is the Federal Data Protection and Information Commissioner.
9. External links
This website contains links to third-party websites, including Purpur Ventures and Google Maps. When you follow such a link, the third party processes data under its own privacy policy. We are not responsible for the content or data processing of external websites.
10. Changes to this privacy policy
We may update this privacy policy when our website, services, or legal requirements change. The version published on this page is the current version. Material changes take effect when they are published unless stated otherwise.