Privacy Policy

1. Scope and Role of Purple Ocean

Purple Ocean is a software and information platform designed to support cannabis operators through educational content, operational frameworks, workflows, and decision-support tools.

Purple Ocean is not:

• A government entity or regulator
• A licensing authority
• A compliance certifier
• A legal, financial, or regulatory advisor

Users remain solely responsible for their business decisions and regulatory compliance.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide, including:

• Name
• Email address
• Organization or business affiliation
• Role or professional context
• Communications submitted through contact forms or inquiries

You may access public portions of the Services without providing personal information.

2.2 Information Collected Automatically

When you access the Services, we may collect certain technical and usage information, including:

• IP address
• Browser type and version
• Device and operating system
• Pages viewed, interactions, and timestamps
• Referring or exit URLs

This information is used for security, analytics, performance optimization, and service improvement.

2.3 Explicit Exclusions (Cannabis-Specific)

Purple Ocean does not collect or ingest:

• Cannabis sales data
• METRC or seed-to-sale data
• OCM filings or regulatory submissions
• Patient, customer, or consumer purchase data
• Inventory, transaction, or payment records

The Services are designed to avoid processing regulated cannabis data unless expressly stated otherwise.

3. How Information Is Used

Information is used for legitimate business purposes, including to:

• Operate, maintain, and secure the Services
• Respond to inquiries and communications
• Improve platform functionality and usability
• Monitor performance and prevent misuse
• Communicate updates related to the Services

Purple Ocean does not sell personal information.

4. Cookies and Similar Technologies

We use cookies and similar technologies to support essential site functions, analyze usage trends, and improve user experience.

You may control cookie settings through your browser. Certain features may not function properly if cookies are disabled.

5. Information Sharing and Disclosure

Information may be disclosed:

• To service providers performing services on our behalf (e.g., hosting, analytics, security)
• When required by law or valid legal process
• To protect the rights, safety, or integrity of Purple Ocean or others
• In connection with a corporate transaction such as a merger or asset transfer

We do not proactively disclose user information to cannabis regulators or enforcement agencies.

6. Data Security and Safeguards

Purple Ocean implements administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration.

Our security practices are designed to align with generally accepted industry standards, including principles reflected in SOC 2 Type II and ISO 27001 frameworks, such as:

• Access controls
• Least-privilege principles
• Monitoring and logging
• Data minimization
• Vendor risk management

No system can be guaranteed 100% secure. Users acknowledge and accept this risk.

7. Data Retention

Information is retained only for as long as reasonably necessary to:

• Provide and improve the Services
• Fulfill legal and contractual obligations
• Resolve disputes
• Enforce applicable agreements

8. User Rights and Choices

Depending on applicable law, users may have rights to:

• Request access to personal information
• Request correction or deletion
• Opt out of certain communications

Requests may be submitted using the contact information below. We may verify identity before responding.

9. Children’s Privacy

The Services are not intended for individuals under 21 years of age. Purple Ocean does not knowingly collect personal information from minors.

10. International and State Privacy Rights

Purple Ocean operates from the United States. Information may be processed and stored in the U.S. or other jurisdictions where service providers operate.

We comply with applicable U.S. state privacy laws where required, including providing lawful mechanisms for access, deletion, or limitation requests when applicable.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Updates will be posted with a revised effective date. Continued use of the Services after an update constitutes acceptance of the revised Privacy Policy.

12. Contact Information

Purple Ocean Agency LLC
Email: legal@purpleocean.org