Legal
Privacy Policy
Effective date: April 24, 2026
MEDI8R (the “Service”) is operated by Purple Spiral LLC (“Purple Spiral,” “we,” “our,” or “us”). This Privacy Policy explains what personal information we collect when you use the Service, how we use it, who we share it with, and the choices you have.
MEDI8R is a communication-support tool. It is not therapy, legal advice, professional mediation, or emergency or crisis services. If you may be in danger, contact local emergency services or a qualified crisis line.
1. Who we are
Purple Spiral LLC
5208 Winsbury Dr
Georgetown, TX 78626
United States
Email: apps@purplespiral.net
For any privacy question, correction request, or data-rights request, email us at the address above.
2. Information we collect
We collect information in three ways: information you give us, information generated when you use the Service, and information from third parties that help us run the Service.
Information you provide. Account identifiers such as email address and (optional) display name; profile fields such as your role or relationship context, the acknowledgments you complete during onboarding, the text of messages, drafts, and agreements you enter, and anything else you type into a session.
Information generated by use. Session, thread, and message metadata (identifiers, timestamps, version history, tone check results), audit events recorded for safety and dispute handling, device and log data (IP address, browser type, approximate location derived from IP, pages viewed, actions taken, referring URL, error diagnostics), and cookies or similar technologies used to keep you signed in and to secure the session.
Information from third parties. Billing and subscription information from our payment processor; authentication data from our identity provider; limited diagnostics from hosting, database, and email delivery providers.
We do not knowingly collect Social Security numbers, passport numbers, government ID numbers, or health records. Please do not enter that kind of information into MEDI8R.
3. How we use information
We use the information we collect to provide, operate, and secure the Service; to authenticate you and keep your account safe; to deliver AI-assisted mediation suggestions and tone checks on the content you submit for review; to process subscription payments and invoices; to respond to support requests; to detect, investigate, and prevent fraud, abuse, or violations of our Terms; to comply with legal obligations; and to improve reliability and quality of the Service through aggregated analytics and internal testing.
We do not sell your personal information. We do not use the content of your sessions, threads, or agreements for cross-context advertising.
4. AI processing of your content
When you explicitly send a draft for mediation or tone review, the text of that draft (plus limited thread context) is transmitted to the AI provider that powers our mediation service so it can return a calmer rewrite, tone assessment, or detail-preservation summary. That AI provider processes the submitted text on our behalf under a data-processing agreement and is contractually restricted from using it to train models. Inputs and outputs are stored in your MEDI8R account as part of the version history so both participants can audit how a delivered message was produced.
You control when mediation runs. Drafts remain private to you until you choose to run mediation, edit a suggestion, or explicitly confirm a version for delivery to your co-participant.
5. Legal bases (EEA/UK users)
If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases: performance of a contract (to provide the Service you requested); our legitimate interests (to secure, debug, and improve the Service, and to prevent fraud and abuse), balanced against your rights; compliance with legal obligations; and your consent, which you can withdraw at any time, for processing that depends on consent.
6. How we share information
With your co-participant. Anything you explicitly confirm and send in a session is visible to the other participant in that session. Drafts, tone check details, and mediation history from your side of the workspace are not shown to them until you send.
With service providers. We share information with vendors that help us run the Service, including hosting and database infrastructure, authentication, email delivery, payment processing (Stripe), AI model inference, and error monitoring. They are permitted to use personal information only to provide services to us.
For legal reasons. We may disclose information if we believe in good faith that disclosure is required by law, legal process, or a lawful request from a government authority, or to protect the rights, property, or safety of Purple Spiral, our users, or the public.
Business transfers. If Purple Spiral is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
7. Data retention
We keep account information and session content while your account is active and for a reasonable period after you close it, so we can resolve disputes, enforce our Terms, and meet legal and accounting obligations. Tone checks, mediation versions, audit events, and explicit confirmations are retained as part of the integrity record of each session. You may request deletion of your account and associated content by emailing apps@purplespiral.net.
8. Security
We use administrative, technical, and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, including encryption in transit, restricted access controls, and row-level authorization in our database. No system is perfectly secure, and we cannot guarantee the security of information you transmit to us.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, update, delete, or port the personal information we hold about you; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. You can exercise many of these rights directly in account settings; for everything else, email us at apps@purplespiral.net and we will respond within the time required by applicable law.
California residents. The California Consumer Privacy Act gives you rights to know, delete, correct, and limit use of certain personal information, and to not be discriminated against for exercising those rights. We do not sell personal information and do not share it for cross-context behavioral advertising.
10. Cookies
We use essential cookies to keep you signed in and to protect the Service. We may use limited analytics to understand aggregate use. You can control cookies in your browser settings; disabling essential cookies will prevent you from using the Service.
11. Children
MEDI8R is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will take reasonable steps to delete it.
12. International transfers
Purple Spiral is based in the United States and our service providers may process information in the United States or other countries. Where required, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses.
13. Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, notify you inside the Service or by email. Continued use of the Service after changes take effect means you accept the updated Policy.
14. Contact us
Questions about this Policy or about our privacy practices? Email apps@purplespiral.net or write to Purple Spiral LLC, 5208 Winsbury Dr, Georgetown, TX 78626, USA.