Privacy Policy

Last updated: June 2026 | Effective: June 2026

1. Introduction

This Privacy Policy describes how Structurify ("Company", "we", "us") collects, uses, and protects information when you use Structurify ("Service").

2. Information We Collect

2.1 Account Information

• Email address (provided via Microsoft authentication)
• Authentication timestamps and access logs

2.2 Documents You Upload

• Documents submitted for extraction processing
• Extracted structured data
• Extraction templates you create

2.3 Usage Information

• Feature usage and interaction data
• Credit consumption history
• Error logs and performance data

2.4 Technical Information

• IP address
• Browser type and version
• Device information
• Referring URLs

3. How We Use Information

We use collected information to:

• Provide and operate the Service
• Process document extractions
• Authenticate your access
• Track credit usage
• Improve Service performance and features
• Communicate service updates and notifications
• Prevent fraud and abuse
• Comply with legal obligations

4. Information We Do NOT Use

5. Data Storage & Infrastructure

5.1 Infrastructure Provider

The Service runs entirely on Cloudflare's infrastructure:

• Compute: Cloudflare Workers
• Document Storage: Cloudflare R2 (S3-compatible object storage)
• Database: Cloudflare D1 (SQLite)
• Authentication: Microsoft Entra ID

5.2 Data Location

Data is stored and processed using Cloudflare's global edge infrastructure for optimal performance and reliability.

5.3 Security Measures

• Encryption at rest: AES-256
• Encryption in transit: TLS 1.3
• Access authentication: Microsoft Entra ID (Microsoft account sign-in)
• No persistent credentials stored client-side

6. Third-Party Services

6.1 AI Processing

Document extraction is performed using third-party AI services. When processing documents:

• Document contents are sent to AI providers via secure API
• We use providers that do not train on customer data (Anthropic Claude)
• Data is not retained by AI providers beyond the processing request

6.2 Payment Processing

Credit purchases are processed by our payment provider. We do not store complete payment card details.

6.3 Analytics

We may use privacy-respecting analytics to understand Service usage. No personally identifiable document contents are included in analytics.

7. Data Retention

Data Type	Retention Period
Account information	Until account deletion + 30 days
Uploaded documents	Until you delete them or account deletion
Extracted data	Until you delete it or account deletion
Templates	Until you delete them or account deletion
Access logs	90 days
Transaction records	7 years (legal requirement)

8. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request export of your data in machine-readable format
• Objection: Object to certain processing activities

To exercise these rights, contact privacy@structurify.ai.

8.1 Data Export

You can export your extracted data at any time through the Service interface (CSV, JSON formats).

8.2 Account Deletion

To delete your account and all associated data, use the Privacy & Data settings in the app or contact support@structurify.ai. Deletion is completed within 30 days.

9. International Users

9.1 GDPR (European Users)

If you are in the European Economic Area:

• Legal basis for processing: Contract performance, legitimate interests
• Data transfers outside EEA are protected by Cloudflare's Standard Contractual Clauses
• You have rights under GDPR Articles 15-22
• To exercise your rights, contact our Data Protection Officer: dpo@structurify.ai

9.2 EU Representative

For EU data subjects and EU supervisory authority matters, our designated EU representative is:

• Name: James Stevenson
• Email: james.stevenson@dscvryai.com
• Role: EU Representative / Europe Privacy Contact (GDPR Article 27)

9.3 CCPA (California Users)

If you are a California resident:

• You have the right to know what personal information we collect
• You have the right to delete your personal information
• You have the right to opt-out of sale (we do not sell personal information)
• We will not discriminate against you for exercising these rights

9.4 Australian Privacy Act

If you are in Australia:

• We comply with the Australian Privacy Principles
• Cross-border data disclosure: Data is processed via Cloudflare's global infrastructure

10. Cookies & Tracking

10.1 Essential Cookies

We use essential cookies required for authentication and security via Microsoft Entra ID. These cannot be disabled.

10.2 No Advertising Cookies

We do not use advertising or tracking cookies.

11. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect information from children. If we become aware of such collection, we will delete it promptly.

12. Changes to Privacy Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or in-app notification. Continued use after changes constitutes acceptance.

13. Contact

For privacy-related inquiries:

• Privacy enquiries: privacy@structurify.ai
• Data Protection Officer (DPO): dpo@structurify.ai
• EU Representative (GDPR Article 27): james.stevenson@dscvryai.com
• General support: support@structurify.ai

Operated by: DscvryAI / DISCOVERY AI LIMITED, London, UK. For data processing agreements, visit our DPA page or email privacy@structurify.ai.