Terms

Terms and conditions

These terms apply to the PurpleScone command deck wherever you use it. The governing law is England and Wales. Contact info@purplescone.com. Last updated 23 September 2026.

The service

PurpleScone lets an organisation connect a learning portal, such as Moodle, and give staff a deck of courses, people, attendance and messages. The main account is responsible for the deck. Invited people use only the sections that account has ticked. By creating an account you agree to these terms and to the privacy policy.

Free trial

A new account may try the deck at no charge so the organisation can see how it works. The trial is not a promise of a particular length. PurpleScone may end it. When it ends, sign-in opens the pricing page and the deck stays closed until the organisation pays and the account is marked paid. Write to info@purplescone.com to arrange payment.

Acceptable use

You will use the deck for the school or organisation that owns the portal. You will not use it to read a site you do not administer, to send a message a person has not chosen to send or to copy the token out of the deck. You will remove a person who leaves.

The Moodle connection

You provide the site URL and an API token. You confirm you are allowed to use that token and that the Moodle account which owns it may be seen as the sender of messages. PurpleScone calls only the functions the token permits. Moodle is a registered trademark of Moodle Pty Ltd. PurpleScone is not Moodle and is not endorsed by Moodle Pty Ltd.

Messages

Nothing is sent by itself. A person sends each message. Messages leave as the Moodle user that owns the token. You are responsible for the wording and for having a proper reason to contact that person.

Staff access

The main account invites people by email and ticks the sections they may open. A direct address to a hidden page sends them home. The main account remains responsible for those ticks and for removing access when someone leaves.

Security

PurpleScone follows ordinary safeguards and is not responsible for security beyond them. You must use a safe connection and a secure password.

What PurpleScone does:

• Passwords are stored only as a one-way hash. The plain password is not kept.
• The API token is encrypted at rest and is not shown back in full.
• The sign-in cookie cannot be read by page scripts and is limited to this site. On HTTPS it is sent only over that secure connection.
• Changes are checked so another website cannot submit a form as you.
• A person who is not ticked for a page cannot open it.

What you must do, and what PurpleScone is not responsible for:

• Open the deck only over HTTPS. An ordinary HTTP connection is not a safe connection.
• Choose a long password that you do not use on another site. Do not share it. Replace the starter password at once and do not leave it in use.
• Keep the API token inside the deck. Do not email it or paste it into another tool.
• The security of your devices, your network, your email and your learning portal. A loss that starts there is yours, not PurpleScone's.

Subscription and price

After the trial, the price depends on the number of users on the connected portal. The bands published on the pricing page apply. A band that is not listed, including 501 to 999 users, is not offered until it is. Fees are in pounds. If the portal grows into another published band, the next invoice uses that band. Failure to pay may pause the deck after notice. These prices are for an organisation buying the deck for its staff. They are not a consumer subscription sold to a pupil.

Your data

The privacy policy explains what is collected, the legal basis and how long it is kept. You licence PurpleScone to process portal snapshots only so the deck can run. You keep ownership of the school data. You can refresh or remove the connection. Closing the deck deletes the token and the snapshots.

Availability

The deck depends on your host and on the learning portal. A portal that is offline or a token that lacks a function will leave that part of the deck empty. We do not promise uninterrupted access.

Liability

Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud or for any liability that the law of England and Wales, or a mandatory rule of EU consumer law, does not allow to be limited. Otherwise the total liability in a year is limited to the fees paid for that deck in that year. We are not liable for loss of profit, for decisions staff take from the deck, for messages a person chose to send or for a loss caused by an unsafe connection, a weak or shared password or the security of your portal.

Ending the deck

You may close the deck at any time. We may suspend it if these terms are broken and the breach is not fixed after notice, or at once if the use is unlawful. On closure the token and the snapshots are deleted.

Law

These terms are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction. If you use the deck from the EU or elsewhere, these terms still apply and they do not remove any right the law says cannot be removed, including rights under the EU GDPR where it applies to you.