How Purplesse handles personal data.

The controller responsible for the processing of personal data is the Story operator identified in the Imprint. Questions about privacy or requests concerning personal data can be sent to the contact address stated in the Imprint.

The final company name, legal form, registration details and data-protection contact will be completed before public launch.

This Privacy Policy applies to visitors, Collectors, Creators, applicants, support contacts and other users of the Story platform.

Separate information may be provided where a specific processing activity requires additional details or consent.

Purplesse may process email addresses, user IDs, account roles, login records, authentication data, profile names, Creator display names, profile descriptions, account settings and verification status.

Creators may also be asked to provide identity, business, tax and payout information where this is required for verification, legal compliance or payouts.

Purplesse processes uploaded images, text, captions, story metadata, categories, locations, prices, declarations, cover designs, story blocks, drafts, submissions, review decisions and publication status.

The platform may also process Collection entries, purchases, access records, support messages, reports, moderation records and technical activity associated with an account.

Personal data is processed to create and manage accounts, authenticate users, provide the marketplace, operate Creator tools, deliver purchased access, maintain Collections, process submissions, review content and provide support.

Depending on the activity, processing may be necessary to perform a contract, take steps requested before entering a contract, comply with legal obligations, protect legitimate interests such as platform security and fraud prevention, or process data on the basis of consent where consent is legally required.

Payments and Creator payouts are processed through external payment service providers. Purplesse should not receive or store complete payment-card details.

Purplesse may receive transaction identifiers, payment status, purchase amount, currency, refund information, chargeback information, payout status and related compliance information needed to operate the marketplace.

Creator identity, payout eligibility, tax information and business details may be processed where required by payment providers, financial regulations, tax law, fraud-prevention rules or Purplesse verification procedures.

Verification records may be retained where necessary to document compliance, prevent abuse and manage disputes.

Purplesse may process submitted content, reports, account activity and supporting information to detect policy violations, investigate complaints, protect users, prevent fraud and respond to unlawful content.

Moderation may involve technical signals and manual review. Decisions may include rejection, requested changes, access restriction, unpublishing, account limitation or removal.

Personal data may be shared with service providers used for hosting, databases, authentication, storage, payment processing, payouts, email delivery, analytics, security, customer support, legal advice and technical maintenance.

Data may also be disclosed to authorities, courts, professional advisers, rights holders or other parties where disclosure is legally required or necessary to establish, exercise or defend legal claims.

Some service providers may process data outside the European Economic Area. Where required, Purplesse will use an applicable transfer mechanism such as an adequacy decision, standard contractual clauses or another legally recognised safeguard.

Information about relevant providers and safeguards will be updated when the final production infrastructure is confirmed.

Personal data is retained only for as long as necessary for the relevant purpose, contractual relationship, legal obligation, security requirement or dispute.

Transaction records, submission evidence, consent records, moderation decisions and tax-relevant information may need to be retained after an account or story is deleted. Backup copies may remain for a limited technical retention period.

Users may request account deletion through the available account tools or support contact. Deletion does not require Purplesse to erase information that must be retained for legal obligations, payment records, fraud prevention, disputes or the protection of third-party rights.

Purchased Collection access and immutable purchase snapshots may require separate handling from the Creator's public story listing.

Subject to applicable law, users may request access, correction, deletion, restriction, data portability or object to certain processing. Consent may be withdrawn at any time for future processing where consent is the legal basis.

Purplesse may request information needed to verify the identity of the person making a request.

Users may contact Purplesse first so that a privacy concern can be reviewed directly.

Users also have the right to lodge a complaint with a competent supervisory authority. For an Austrian controller, this may include the Austrian Data Protection Authority.

Purplesse uses technical and organisational measures intended to protect personal data against unauthorised access, alteration, loss, disclosure or destruction.

No online service can guarantee absolute security. Users must protect their credentials and notify Purplesse promptly if they suspect unauthorised account access.

Purplesse is not designed as a service for children. Creator accounts and access to mature content are restricted to adults.

Mature content is subject to additional age, verification, consent and moderation rules described in the Mature Content Policy.

Purplesse may update this Privacy Policy where the service, providers, processing activities or legal requirements change.

The current version and effective date will be displayed on this page. Material changes may also be communicated through the platform or by email.