Privacy Policy
StructAI Inc. is committed to absolute data sovereignty. This Privacy Policy details how we collect, store, safeguard, and process information across our marketing web services and enterprise platform.
01 Our Core Privacy Philosophy
At StructAI, we believe business telemetry and revenue intelligence belong exclusively to the enterprise that generated them. We design our systems from the ground up to uphold the principle of tenant isolation and Zero-Data Retention.
We comply with international data protection standards, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Digital Personal Data Protection Act, 2023 (India DPDP Act).
02 Information We Collect
We collect information in three distinct categories:
When you register or request enterprise access, we collect your full name, business email address, company name, telephone number, job title, and cryptographic password hashes. Billing transactions are processed via certified PCI-DSS compliant third-party payment gateways (Stripe and Razorpay); StructAI never stores raw credit card numbers.
When you connect third-party integrations (such as CRM systems, advertising accounts, email domains, or webhooks), StructAI accesses lead records, conversion signals, campaign performance metrics, and communication logs strictly to build your private tenant Revenue Graph and execute your chosen workflows.
When visiting structai.in or using the application, our servers automatically record Internet Protocol (IP) addresses, device hardware parameters, browser user agents, referring URLs, operating systems, and page interaction timestamps for diagnostics, DDoS protection, and rate-limiting.
03 Zero-Data Retention SLA & AI Model Boundaries
1. No Public Model Training: Your private tenant data, CRM records, and business workflows are never used to train, fine-tune, or calibrate public foundational AI models (such as OpenAI, Anthropic, or Google models).
2. Zero Cross-Tenant Leakage: All enterprise accounts operate within isolated database schemas. Embeddings generated for your contextual graph are inaccessible to any other tenant.
3. Zero-Data Retention (ZDR) Inference: For enterprise customers, third-party model inference is routed exclusively through enterprise zero-data retention endpoints where prompt contents and responses are discarded immediately following execution.
05 How We Use Your Information
- Autonomous Revenue Execution: Synthesizing contextual buyer signals to orchestrate email campaigns, SDR tasks, and lead qualification routines.
- Platform Maintenance & Security: Authenticating users, monitoring infrastructure health, detecting anomalous intrusion attempts, and preventing fraudulent billing.
- Customer Support: Investigating platform inquiries, debugging webhook payloads, and resolving API connectivity errors.
- Legal & Regulatory Compliance: Fulfilling tax, corporate reporting, and lawful audit obligations under Indian and international law.
06 Third-Party Sub-Processors
StructAI does not sell, trade, or rent personal data to data brokers or advertisers. We engage vetted sub-processors bound by stringent Data Processing Addendums (DPAs):
07 Your Rights & Data Control
Depending on your jurisdiction, you possess the following rights regarding your personal data:
- Right of Access: Request a full copy of the personal information we hold concerning your account.
- Right to Rectification: Correct inaccurate, incomplete, or outdated account records.
- Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your account and associated tenant graph data.
- Right to Data Portability: Export your customer records, campaign history, and system logs in standard machine-readable JSON or CSV formats.
- Right to Withdraw Consent: Revoke consent for analytics or marketing communications at any time.
To exercise any of these statutory rights, submit a verified request to our Data Protection Officer at privacy@structai.in. We respond to all verified requests within thirty (30) days.
08 Data Retention & Permanent Deletion Protocols
We retain Customer Data for the duration of your active subscription. Following tenant account termination or upon receiving a formal deletion request, your tenant database schema, vector embeddings, and API tokens are placed into a 30-day grace quarantine before being irrevocably shredded and purged from production databases and cold backups.
09 Enterprise Security Standards
We employ state-of-the-art cryptographic and operational protections:
Data Protection Officer & Inquiries
If you have questions, grievances, or compliance audits regarding our data practices, contact our Data Protection Officer: