I just got this lame email form Purple. It leads to a rambling page with marking BS. In short:
Yes they used the bad version of OpenSSL like many others. Yes they are now patched, yes you now need to change your password. That and a link to do so is all they needed to put in the email. You can do so here:
https://shop.platformpurple.com/forgot/"Hello valued Luminous Landscape digital customer:
We are Platform Purple, the company that handles digital downloads and streaming for Luminous Landscape.
You may be aware of the recent discovery of an Internet security issue called "Heartbleed." Platform Purple has worked very hard over many years to provide an extremely high level of security for our end users and clients, so we wanted to let you know a few important things when it comes to Heartbleed and Purple, so we wrote a blog post about it here:
http://platformpurple.com/blog/purple-and-heartbleed/Please look it over and if you have any questions or concerns, please contact us here:
http://platformpurple.com/help/contact-us/Thanks!
Your friends at Purple"
