Purple Signals

Privacy notice

Pilot version · July – August 2026

The short version: your survey answers are anonymous and unlinkable. They are stored without your name, email, user ID, the question asked, or a timestamp. No one, including your employer and anyone with full database access, can connect an answer to a person. This is enforced by the data architecture, not by policy.

Things that are not possible, by design

  • We cannot retrieve your past survey responses for you. There is no link by which to find them.
  • We cannot identify a respondent from a response, and neither can your employer.
  • Aggregate scores never display for a survey cycle below the response threshold agreed for your organisation. Individual question scores are never shown to anyone.

What we store about you

Account data (linked to you): name, work email, role, company, and sign-in records. Your company admin manages this; it exists so you can log in and be invited to surveys.

Participation flags (linked to you): whether you completed a given survey cycle — used for the “12 of 18 responded” counter and reminders. This says nothing about what you answered.

Survey answers (not linked to you): each answer is stored as a score against a leadership component and a cycle only. No user, no question, no time. Answers are kept as raw anonymous rows for 12 months, then collapsed into cycle-level aggregates.

Written answers (not linked to you): some surveys include optional free-text questions. These are stored the same way, against a component and a cycle only, with no user, question, or time. They are reviewed solely by Purple Signals to surface common themes. Your leaders and colleagues never see what you wrote; themes drawn from written answers may inform the team-level report, but never verbatim text. Because we cannot attribute a written answer to you, we cannot retrieve your answers for you. If you believe you included something identifying and can tell us the exact wording, we can locate and remove that text. To keep your answers fully anonymous, avoid details that could identify you.

How anonymised data is used

Purple Signals may use anonymised, aggregated data to improve the platform, conduct benchmarking and undertake research. This data cannot identify you or your organisation.

Who processes data (subprocessors)

  • Vercel — application hosting (EU region).
  • Resend — transactional email (magic-link sign-in).

Survey data is held in Purple Signals' own PostgreSQL database on an EU-located server, not a third-party cloud database.

Your rights and contact

Purple Signals is the data controller for the pilot. To access, correct, or delete your account data (the identified data above), contact your company admin or email privacy@purplesignals.io. Deleting your account erases your identity and sign-in records; your past anonymous answers remain inside team aggregates, where they cannot be found or attributed.

Consent: before each survey you confirm a consent line stating your answers are stored anonymously and combined into team-level scores, and that any written answers are reviewed anonymously by Purple Signals only.