Privacy Policy

1. Who we are

Purple Orange AI ("we", "us", "our") is a production AI engineering practice operated by Max Markovtsev, based in Chicago, Illinois, United States. You can reach us at max@purpleorange.ai. This policy applies to purpleorange.ai and any subdomains we operate.

2. Information we collect

Information you give us directly

• Contact form: your name, company, work email, team type, and the message you send.
• Newsletter: your email address.
• Booking calls: whatever Calendly collects to schedule (typically name, email, and time zone). Calendly is the processor for call scheduling.
• Email correspondence: whatever you choose to send us.

Information collected automatically

• Analytics: Google Analytics 4 (GA4) with anonymize_ip enabled. This records page views, approximate geographic region, device type, referrer, and session duration. No advertising signals, no cross-site identifiers.
• Server logs: our hosting provider logs standard HTTP request data (IP address, user agent, timestamp) for security and uptime. Logs are rotated regularly.

Information we do not collect

• We do not run advertising pixels (no Meta pixel, no LinkedIn Insight Tag, no Google Ads remarketing).
• We do not collect payment information on this site. If you engage us, invoicing runs through a separate payment processor with its own privacy terms.
• We do not fingerprint your browser.

3. How we use your information

• To reply to your inquiry and schedule a call.
• To send the weekly newsletter you subscribed to (and only that).
• To understand which content is useful and improve the site.
• To operate and secure the site (prevent abuse, fight spam).
• To comply with legal obligations where applicable.

We do not use your information to train machine-learning models. We do not sell, rent, or trade your information.

4. Legal basis (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your data under these bases:

• Consent — for newsletter subscriptions and non-essential analytics.
• Legitimate interests — for replying to your inquiry, security, and site operation.
• Contract — where necessary to deliver services you engaged us for.
• Legal obligation — where required by law.

5. Processors and third parties

We use a small, intentional set of service providers:

• Google Analytics (Google LLC) — site analytics with IP anonymization.
• Beehiiv — newsletter delivery and subscription management.
• Calendly — scheduling booked calls.
• Google Fonts — typography.
• Simple Icons CDN — integration logos on marketing pages.
• Our VPS hosting provider — serves the site and processes form submissions.

Each processor has its own privacy policy governing the data it touches. We choose providers that support strong data protection practices.

6. Cookies and similar technologies

We use a minimal set of cookies:

• Analytics cookies set by Google Analytics (e.g., _ga) with IP anonymization. You can opt out by installing the Google Analytics opt-out browser add-on.
• Functional storage set by embeds (for example, Calendly) when you interact with them.

We do not use advertising cookies. Your browser's "Do Not Track" signal is respected where technically supported.

7. Data retention

• Newsletter subscribers: kept until you unsubscribe, then removed from the active list within 30 days.
• Inquiries: kept for up to 24 months to manage client relationships and referrals, unless you ask us to delete sooner.
• Analytics: GA4 is configured to retain user-level and event-level data for 14 months.
• Server logs: rotated on a short cycle (typically 30 days).

8. Your rights

Depending on where you live, you may have the right to:

• Access the information we hold about you.
• Correct inaccurate information.
• Delete your information ("right to be forgotten").
• Object to or restrict processing.
• Export your information in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email max@purpleorange.ai. We respond within 30 days.

9. California residents (CCPA/CPRA)

We do not sell personal information as defined under the CCPA/CPRA. California residents have the right to know what personal information we collect, request deletion, correct inaccurate information, and not be discriminated against for exercising these rights. Contact us at max@purpleorange.ai.

10. International transfers

We operate from the United States. If you are outside the U.S., your information will be transferred to and processed in the U.S. We rely on appropriate safeguards (including Standard Contractual Clauses where required) with our processors.

11. Children

This site is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Security

We use reasonable technical and organizational measures — TLS everywhere, access controls, minimal data collection, and short retention windows — to protect your information. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

13. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with an updated "Last updated" date. Continued use of the site after changes means you accept the updated policy.