LEGAL
Privacy Policy.
What we collect, why we collect it, and the rights you have over your data — written plainly, no dark patterns.
Last updated: 11 May 2026 · Effective: 11 May 2026
LEGAL
What we collect, why we collect it, and the rights you have over your data — written plainly, no dark patterns.
Last updated: 11 May 2026 · Effective: 11 May 2026
AT A GLANCE
01 — WHO WE ARE
PurpleMESH Solutions ("PurpleMESH", "we", "us", "our") is a company headquartered in Hyderabad, India, that builds AI products and provides software engineering services for the insurance industry.
For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") we act as a Data Fiduciary. For the EU/UK General Data Protection Regulation we act as a Controller for data we collect through this website and as a Processor for data our customers entrust to us inside our products and services.
02 — WHAT WE COLLECT
When you fill out our contact form, request a demo, or email us, we receive:
If you accept analytics cookies, Google Analytics 4 collects:
A full list of cookies is in our Cookie Policy.
We do not knowingly collect special-category data (e.g. health, religion, biometrics) through this website, and we do not collect data from children under 18.
03 — HOW WE USE IT
| Purpose | Data Used | Legal Basis (GDPR) / Ground (DPDP) |
|---|---|---|
| Respond to your enquiry or demo request | Contact form fields | Legitimate interest / consent at point of submission |
| Understand site usage and improve content | Analytics data (only after consent) | Consent |
| Send follow-up emails about your enquiry | Name, email, conversation history | Legitimate interest |
| Protect against fraud, abuse, and security threats | Request metadata, logs | Legitimate interest / legal obligation |
| Comply with legal and tax obligations | Records relating to contracts and enquiries | Legal obligation |
04 — SHARING
We do not sell personal data. We share it only with the following categories of recipients, each bound by contract to protect it:
A full sub-processor list is available on request via privacy@purplemesh.in.
05 — INTERNATIONAL TRANSFERS
Some of our service providers (e.g. Google) may process data outside India or the EEA. Where they do, we rely on appropriate safeguards — Standard Contractual Clauses under the GDPR and lawful transfer mechanisms under the DPDP Act — and we restrict transfers to countries not on any government-issued negative list.
06 — RETENTION
07 — YOUR RIGHTS
Depending on where you live, you have some or all of the following rights:
To exercise any of these rights, email hello@purplemesh.in. We respond within 30 days.
08 — SECURITY
PurpleMESH is ISO 27001:2022 certified. We use encryption in transit and at rest, role-based access control with MFA, vulnerability scanning, and documented incident-response procedures. Full details are on our Trust & Compliance page.
09 — CHILDREN
Our website and services are intended for businesses and adult professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with their data, please contact us and we will delete it.
10 — CHANGES
We may update this policy when our practices, the law, or our service providers change. Material changes will be highlighted at the top of this page and, where required, notified to you directly. The "Last updated" date at the top tells you when this version took effect.
11 — CONTACT
For any privacy matter — including DPDP Act grievances — please contact our Grievance Officer / Data Protection contact:
PurpleMESH Solutions
Attn: Grievance Officer · Privacy
Hyderabad, Telangana, India
hello@purplemesh.in
For general enquiries, use our contact page.