Privacy Policy
Highpurple Solutions (“Highpurple”, “we”, “us”) operates HP-KM Analytics, a private business-analytics application at https://km.highpurple.in. This policy explains what personal data we handle and why. It is written to comply with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under them.
1. This is a private, invitation-only application
This application is not open to the public. Access is granted only to named individuals authorised by Highpurple or its client, and can be withdrawn at any time.
2. What we collect
- Google account details — when you sign in with Google, we receive your email address, name and the fact that your email is verified. We store your email address and name.
- Access records — the time you last signed in, and a token identifying the device you chose to stay signed in on.
- Business data — the application processes marketing, advertising and customer-relationship records belonging to the business it serves. That data is the business's, not ours, and we process it only to provide this application.
We do not collect payment details through this application, and we do not knowingly collect data from children.
3. How we use Google account data
We request only the openid, email and profile permissions,
and use what Google returns for a single purpose: to confirm who you are and check that address
against our list of authorised users. Specifically, we do not sell it, share it
with third parties, use it for advertising or profiling, or use it to train any AI or machine
learning model. Our use of information received from Google APIs adheres to the
Google
API Services User Data Policy, including its Limited Use requirements.
4. Why we are allowed to hold it
We process this data to provide a service you have asked to use, and for our legitimate interest in keeping the application secure and access controlled. You give consent by choosing to sign in; you may withdraw it at any time by asking us to remove your access (see section 8).
5. Cookies
We use two strictly necessary cookies. No advertising or third-party tracking cookies are set.
PHPSESSID— keeps you signed in during a visit; cleared when you log out.km_remember— keeps you signed in for up to 30 days so you need not sign in each time. Removed when you log out.
6. Sharing
We do not sell or rent personal data. We share it only with the hosting and infrastructure providers needed to run the application, where required by law or a valid legal request, and with the business whose data this application serves.
7. Retention and security
We keep your access record for as long as you remain an authorised user, and remove it on request or when your access ends. Sign-in tokens expire automatically within 30 days. Data is held on access-controlled servers, transmitted over encrypted (HTTPS) connections, and sign-in tokens are stored only in hashed form. No system can be guaranteed perfectly secure.
8. Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask us to access, correct, complete, update or erase your personal data, withdraw consent, or nominate someone to act for you. Write to us at aditya@highpurple.com and we will respond within a reasonable period.
9. Grievance Officer
If you are unhappy with how we have handled your data, contact:
Aditya Samdani, Grievance Officer
Highpurple Solutions, Marigold, L&T Serene County, Gachibowli, Hyderabad, Telangana, India
aditya@highpurple.com
You may also complain to the Data Protection Board of India.
10. Changes
We may update this policy; the effective date above will change when we do. Continued use after an update means you accept the revised policy.
11. Contact
Highpurple Solutions
Marigold, L&T Serene County, Gachibowli, Hyderabad, Telangana, India
aditya@highpurple.com ·
https://highpurple.com