Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains how Purpleseed LLC («Purpleseed» or «we») collects, uses, shares and protects information in relation to Max, The AI agent that we develop and operate under the name PurpleLab, and the associated services (collectively, the «Services»). The Services include:

• our website agentemax.ai, Including the chat with Max on that site;
• the workspace for clients in pods.purpleseedlab.com (the «Work Space»);
• the public conversation pages on public.agentemax.ai; and
• the messaging channels (such as WhatsApp, email and the website chat) through which Max communicates with the customers of the companies that use our Services.

1. Our two functions

We provide services to companies («Business Customers»). Depending on who owns the information, we act in one of two capacities, and your rights depend on which of these applies.

• As the person responsible for the processing. We decide how the information of our website visitors, people who communicate with us, and account holders and staff of the Client Businesses that use the Workspace are used.
• As the data controller (service provider). When a Customer Business uses Max to chat with its Customers, it is the Customer Business who decides for what and how that information is used. In that case, the Customer Business is responsible for the processing, and we process the information solely on behalf of the Customer, in accordance with their instructions and the contract we have with them.

If you write to a company that uses Max (for example, he sent a WhatsApp message to a distributor and Max replied), that company is responsible for your information. The privacy notice of that company applies, and requests regarding your information should be directed to it in the first place (see Section 9).

2. Information we collect

Information that you provide to us. Your name, email address, phone number, company name, position, and any content you send to us when you contact us, request a demo, complete a form, create an account, or enter into a contract with us.

Account information. For Workspace users: name, email, phone, profile photo, role, and team membership. Your password is stored solely as a one-way hash. If you sign in with Google, we receive your name, email address, and profile photo from Google.

Billing information. Payments to Purpleseed are processed by Stripe. Stripe receives your card or bank account details directly. We do not receive or store full card numbers; we only keep the references that Stripe provides to us.

Information that we process on behalf of the Client Businesses («Customer Data»). When a Customer Business connects a channel or uploads its information to the Services, we process:

• Contents of the conversations: the text of the messages, the voice notes (which we transcribe into text), the images, the documents and other attached files sent to or by Max;
• Contact information: phone number, email address, name and the data that the Business stores about its own customers (for example, account type, credit conditions or contact preferences);
• Commercial records: orders, catalogs, price lists, inventory and the other records that Max uses to carry out his work;
• Conversation memory: short notes that Max keeps about a contact so that the next conversation doesn’t start from scratch (for example, «he prefers delivery on Tuesdays»). This memory belongs to the Customer Business account and is never available to any other Customer Business; and
• Messaging metadata: sender and recipient identifiers, timestamps, and delivery statuses.

Public conversation pages. When you open a public.agentemax.ai page, we record the page from which you came, the page you accessed, how many times you visited it, the language of your browser, and, if the link you followed included it, your name and email address. That information is transmitted to the Client Business that owns the page.

Usage and device information. Their IP address, browser and device type, pages visited, actions performed, and dates and times of access. In the Workspace we use product analytics tools that They can record their session (the pages you visit and how you interact with them) and error monitoring tools that record technical details when something goes wrong. See Section 3 and our Cookie Policy.

Advertising cookies and pixels. Only on agentemax.ai, and only if you accept them in the cookie banner, advertising platforms such as Meta, LinkedIn and Google install cookies or pixels that inform them that you visited our site and what you did on it (for example, that you requested a demo). We use them to measure our ads and to show them to people who visited our site. The cookie banner indicates the platforms used at any given time. These technologies never They are used neither in the Workspace nor in public conversation pages, and never receive Customer Data.

3. How we use the information

We use the information to:

• provide, operate and maintain the Services, which includes enabling Max to read and respond to messages, place orders and send notifications that a Customer Business has configured;
• authenticate users and maintain the security of the Services;
• understand how the Services are used and detecting and correcting errors, including the errors in what Max says (see Section 4);
• to communicate with you regarding your account, security, billing, and changes to the Services;
• send product updates and marketing communications to business contacts, who can unsubscribe at any time;
• process payments;
• measure our advertising and show our ads to the people who visited our website, if they accepted the advertising cookies; and
• comply with the law, enforce our contracts, and prevent fraud and abuse.

The Customer Data is used solely to provide the Services to the Customer Business to which it belongs., and in accordance with the instructions of that business. We do not use them for our own or independent purposes, we do not sell them, and we do not combine the Customer Data of one Customer Business with those of another.

4. How Max uses artificial intelligence

Max is an AI agent. It is important that you know how it works:

• Max identifies himself as an AI. When Max responds in a messaging channel, he identifies himself as an AI assistant.
• Max responds automatically. Max responds to messages in real time, without a person having to review each response before sending it. The Customer Business staff can read the conversations and take control of them at any time.
• We use third-party AI models. To understand and respond to messages, transcribe voice notes and read images or documents, we send the relevant content to AI model providers (currently Google, Amazon Web Services, OpenAI and Anthropic; see Section 5). They process it to generate a response for us. We use their enterprise services, whose terms do not allow them to use the data we send them to train their models.
• We do not train AI models with their data. We do not use the Customer Data for training or for adjusting (fine-tuning) AI models.
• People from our team can review the conversations. To detect and correct errors and to provide support to Business Customers, a limited number of authorized Purpleseed employees may review the conversations and technical records of how Max generated a response. They do so subject to confidentiality obligations and solely for those purposes. When Max needs human assistance, he can send the context of the conversation to our team.
• Max can be wrong. AI-generated responses may contain errors. You should not rely on Max for legal, medical, financial, or other professional advice. Clients remain responsible for the offers and information they provide to their customers.

5. How we share information

We do not sell personal information in exchange for money, and we never share Customer Data with advertising platforms. If you accept advertising cookies on agentemax.ai, those platforms receive information about your visit (Section 2). Some laws call this «sharing» behavioral advertising across contexts; you can reject it, or revoke your consent at any time from the cookie banner. We only share information in the following cases:

• Service providers (subcontractors) that help us operate the Services: cloud hosting and databases, providers of AI models, AI quality and monitoring tools, message delivery, email sending, payments, product analytics, and error monitoring. They may only use the information to provide their service to us, subject to obligations of confidentiality and data protection. The current list is available on our List of sub-supervisors.
• Messaging platforms like Meta (WhatsApp) and Twilio, to the extent necessary to send and receive messages. Their own terms and policies also apply.
• Integrations that connect a Business with a Customer, Like your CRM or your file storage. We send data to them because the Business Client indicates it to us.
• The Client Business with whom you talk, if you are one of their customers.
• Advertising platforms Like Meta, LinkedIn and Google, only regarding visitors to agentemax.ai who accepted the advertising cookies. These act in accordance with their own privacy policies.
• For legal reasons: to comply with the law or a valid legal process, to enforce our contracts, or to protect the rights, safety, and property of Purpleseed, our users, or the public.
• In a business transfer: as part of a merger, acquisition, financing, or sale of assets. This Policy, or a policy offering at least the same protection, will continue to apply.

6. For how long do we keep the information

We retain personal information only for as long as necessary for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce our contracts.

• Account information: as long as the account is active and up to 180 days after its closure.
• Customer Data: While the Customer Business relationship with us is in effect. The Customer Business may request a copy within the first 30 days following the termination of the contract, and we will delete it within 180 days following such termination, unless the law requires us to retain it.
• Records of conversations in our AI monitoring tools: up to 180 days from its creation.
• Backup copies: They are continuously removed within a period of 35 days.
• Invoicing records: during the period required by tax and accounting legislation.

7. Security

We implement reasonable technical and organizational measures to protect the information, including: encryption in transit (TLS); encryption in our main databases; an independent database for each Client Business; role-based access controls; and encryption of stored credentials for connected services. No system is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the Client Business as required by law.

8. International transfers

We are headquartered in the United States, and our Services operate on infrastructure located in the United States. Some of our AI model providers may process a request in another country where they operate. If you are located outside of the United States, your information will be transferred, stored, and processed in the United States, where data protection laws may differ from those of your country. When required by law, we implement appropriate safeguards for these transfers, and the Client Businesses that use Max are responsible for informing their customers.

9. Your rights and choices

Depending on where you live, you may be entitled to:

• access to the personal information we have about you and obtain a copy of it;
• to correct information that is inaccurate;
• suppress your information;
• object to certain uses or request their limitation, including direct marketing;
• revoke their consent when we base ourselves on it; and
• not be discriminated against for exercising these rights.

In Mexico, these are known as ARCO rights; in Colombia, as the rights of the indigenous peoples. owner in accordance with Law 1581 of 2012.

Regarding the information for which we are responsible, Write to team@purpleseedlab.com from the email address associated with your account, or tell us how to verify your identity. We will respond within 30 days.

Regarding the information we process on behalf of a Client Business (for example, a conversation you had with a company through Max), contact that company. If you write to us instead, we will forward your request to that company and help you answer it.

Marketing: You can unsubscribe by clicking the link included in any marketing email.

Advertising cookies: You can reject them, or revoke your consent at any time, from the cookie banner on agentemax.ai.

WhatsApp: You can ask a company at any time to stop sending you messages via WhatsApp by telling them in the conversation.

10. Minors

The Services are intended for businesses and are not directed to minors. We do not knowingly collect personal information from persons under 18 years of age. If you believe that a minor has provided us with personal information, please contact us and we will delete it.

11. Changes to this Policy

We may update this Policy. We will change the «Last updated» date and, if the changes are substantial, we will notify account holders by email or through the Workspace before they take effect.

12. Contact

Purpleseed LLC 4030 Wake Forest Road, Raleigh, NC 27609, United States team@purpleseedlab.com

This Policy is available in English and Spanish. If the two versions differ, the English version shall prevail.