Privacy and data practices
Operational draft · Effective August 18, 2026 · Last updated August 18, 2026
This operational draft explains how Structa AI handles information when you use its construction-focused Construction AI CFO service at https://app.structaops.com.
Operator and contact
Operator: An individual proprietor. Business address: 1799 Lane, Yinchun Road, Shanghai, China. Contact: support@structaops.com.
Information the service handles
Account and workspace data
Email address, session state, company membership, workspace invitations, and subscription entitlement data.
Construction operating data
Company, project, estimate, cost, labor, material, proposal, and analysis inputs that you choose to submit.
Service and security data
Request identifiers, operational logs, rate-limit events, and security records used to protect the service and diagnose failures.
Anonymous product analytics
When you visit public product pages, the service records page views, broad acquisition source, campaign labels, and selected conversion events. A random browser identifier is stored in local browser storage and hashed server-side; the analytics dashboard does not receive your name, email, full IP address, or customer message content.
Payment metadata
Checkout, subscription, payment status, and provider identifiers. Card details are handled by the authorized payment provider and are not stored by Structa AI.
How information is used
- Provide account access, company workspaces, project analysis, proposals, and subscription features.
- Enforce server-side quotas, plan permissions, workspace membership, and administrative boundaries.
- Send requested magic links, analysis unlock links, and workspace invitations.
- Process AI requests only when the relevant feature is used and the provider is configured.
- Understand product acquisition and conversion performance through first-party operational analytics.
- Protect the service, investigate abuse, maintain backups, and respond to support requests.
Service providers
The current deployment is designed to use Zeabur for hosting, Resend for transactional email, OpenAI for live AI processing, and Creem for payment processing. DNS may be provided by the domain registrar. Each provider receives only the information needed for its service path. Provider credentials remain server-side.
Sharing and advertising
This policy does not authorize sale of personal information or advertising profiles. The owner analytics dashboard is private and is not shared with advertisers. Service providers may process information under their own terms and privacy policies to provide hosting, email, AI, domain, monitoring, or payment services.
Your choices and requests
You can sign out, clear browser storage to reset the anonymous visitor identifier, request account or workspace assistance, or contact support@structaops.com. Users may request access, correction, export, deletion, or restriction where applicable. Some limited information may remain in backups or where required by law.
Retention, security, children, and updates
The service retains information only for as long as needed to provide the service, meet security and legal obligations, resolve disputes, and maintain controlled backups. Anonymous analytics events are automatically limited to a rolling operational retention window; the exact retention schedule must be confirmed before production publication. The service uses protected sessions, access controls, encrypted transport, rate limits, and database protections, but no online service can guarantee absolute security. The service is not directed to children below the minimum legal age required in their location. This policy may be updated when the service, providers, or legal requirements change.