Privacy Policy

Last updated: April 14, 2026

Structo is operated by Structo LLC, a Wyoming limited liability company, located at 30 N Gould St, STE R, Sheridan, WY 82801, USA.

Your privacy matters to us. This Privacy Policy explains how Structo LLC ("we", "us", or "our") collects, uses, stores, and protects your information when you use the Structo application ("the App"). By using Structo, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and user role preference (Developer/Project Manager or Contractor). Your password is encrypted and managed through Firebase Authentication — we never have access to your plaintext password.

Project Data

Projects you create — including project names, cost items, contractor details, measurements, custom fields, work periods, payments, reminders, notes, and supplier information — are stored locally on your device and optionally synced to the cloud.

Files and Media

Blueprint files (PDF, DXF, DWG, images), cost item photos, estimate images, and contractor attachments you add to projects are stored locally within the App's sandbox and optionally synced to cloud storage.

DWG File Conversion

When you upload DWG files, they are temporarily sent to a third-party cloud conversion service to convert them to DXF format for processing within the App. These files are transmitted securely over HTTPS and are deleted from the conversion service immediately after processing is complete. We do not retain copies of your DWG files on third-party servers beyond the duration necessary for conversion.

AI Analysis Data

When you use the AI estimation feature, a rendered image of your floor plan and extracted geometry metadata are sent to Google's Gemini API for processing. This data is transmitted securely over HTTPS and is used solely to generate the estimate. Google processes plan images via the Gemini API and does not retain them beyond the API request duration, in accordance with Google's Gemini API Terms of Service. Structo does not store your plan images on our servers or third-party storage services.

Subscription Information

If you subscribe to a paid plan, your subscription status is managed through Apple's App Store. We do not collect or store payment card details. We receive only your subscription status and transaction identifiers from Apple.

We do not collect:

Location or GPS data
Contacts or address book information
Usage analytics or behavioral tracking data
Advertising identifiers or device fingerprints
Browsing history or data from other apps

Cookies and Session Data

We use only essential session tokens and authentication credentials necessary for the App's functionality. We do not use cookies for tracking, advertising, or analytics purposes.

2. How We Use Your Information

Purpose	Data Used	Legal Basis (GDPR)
Account authentication and login	Email address, encrypted password	Contract performance
Cloud synchronization across devices	Project data, files, user preferences	Contract performance
AI-assisted estimation	Floor plan images, DXF geometry metadata	Consent / Contract performance
DWG file conversion	DWG file data (sent to cloud converter)	Contract performance
Project sharing and collaboration	Email addresses of invited collaborators	Contract performance
Personalizing your experience	User role, language preference, appearance settings	Legitimate interest
Subscription management	Apple subscription status	Contract performance
Customer support	Email address, account information	Legitimate interest

3. Data Storage and Security

We take the security of your data seriously and employ multiple layers of protection:

Local storage: Your data is stored within the macOS/iOS application sandbox, isolated from other applications on your device.
Cloud infrastructure: Cloud-synced data is stored using Google Firebase services (Firestore and Cloud Storage) located primarily in the United States. Firebase employs industry-standard encryption both in transit (TLS 1.2+) and at rest (AES-256). You can view Firebase's data center locations at Firebase Privacy Information.
Access controls: Firebase Security Rules restrict cloud data access to project owners and explicitly authorized collaborators only.
Authentication: All accounts are protected by Firebase Authentication with encrypted credential storage.
AI processing: Plan images sent for AI analysis are transmitted over encrypted connections (HTTPS) and are not retained by the AI service beyond the duration of the request.

While we implement reasonable safeguards, no method of electronic storage or transmission is 100% secure. We encourage you to maintain your own backups of critical project data.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant data protection authorities as required by applicable law, including within 72 hours as required under GDPR and without unreasonable delay as required under CCPA.

4. Data Sharing and Third Parties

We do not sell, rent, trade, or share your personal information with third parties for marketing or advertising purposes.

Your data is accessible only to:

You — the account owner, with full control over your data.
Your collaborators — users you explicitly invite to shared projects, limited to the data within those shared projects.
Google Firebase — our cloud infrastructure provider, which processes data on our behalf in accordance with Google's Privacy Policy and their Data Processing Terms.
Google Gemini API — processes floor plan images when you use the AI analysis feature, subject to Google's AI Terms of Service.
Apple — for subscription and payment processing, subject to Apple's Privacy Policy.

We may disclose information if required by law, legal process, or governmental request, or to protect the rights, safety, or property of Structo, our users, or the public.

5. Data Retention

Your data is retained for as long as your account remains active. Specifically:

Project data: Retained until you delete the project or your account. Deleting a project removes it from both local storage and the cloud.
Account information: Retained until you request account deletion.
AI analysis data: Plan images are not stored beyond the API request. AI-generated estimates are stored as part of your project data and follow the same retention policy.
Cloud backups: Deleted data may persist in automated backups for up to 30 days before being permanently removed.
Local data: Removed when you uninstall the App or manually clear its data.

6. Your Rights and Choices

You have the following rights regarding your data:

Access: You can view and export your project data at any time through the App.
Correction: You can update your account information and project data directly within the App.
Deletion: You can delete individual projects within the App. To delete your entire account and all associated data, contact us at the email below.
Portability: Your project data is stored in standard formats and can be exported from the App.
Opt out of cloud sync: You can use Structo in local-only mode without syncing data to the cloud.
Opt out of AI analysis: The AI feature is entirely optional. You can use all other features of the App without ever submitting plans for AI analysis.

7. Offline Functionality

Structo supports full offline functionality. When working offline, all data is stored locally on your device. Changes are synchronized to the cloud only when you are connected to the internet and cloud sync is enabled. You are in control of when and whether your data leaves your device.

8. Children's Privacy

Structo is designed for construction professionals and is not directed at children under 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete that information promptly.

9. Regional Privacy Rights

Depending on your location, you may have additional rights under local privacy laws.

9.1 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the following additional rights under the GDPR/UK GDPR:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Automated Decision-Making: AI-generated estimates are provided as suggestions only and do not constitute automated decision-making with legal or similarly significant effects.

Data Transfers: Your data may be transferred outside the EEA/UK. We use Standard Contractual Clauses (SCCs) approved by the European Commission and/or UK International Data Transfer Agreements to protect these transfers.

Data Protection Officer: For GDPR-related inquiries, contact support@structo.llc.

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

9.2 United States — California (CCPA/CPRA)

If you are a California resident, you have the following rights under the CCPA/CPRA:

Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes, and the categories of third parties with whom we share it.
Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
Right to Correct: You may request correction of inaccurate personal information.
Right to Opt Out of Sale/Sharing: We do not sell or share your personal information as defined by the CCPA/CPRA.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

Categories of Personal Information Collected: Identifiers (email, name); commercial information (subscription status); internet/electronic activity (cloud sync usage); professional information (user role, project data).

To exercise your rights: Contact support@structo.llc. We will verify your identity and respond within 45 days.

9.3 Canada (PIPEDA)

If you are in Canada, under PIPEDA and applicable provincial laws:

You have the right to access your personal information and challenge its accuracy.
We obtain meaningful consent for the collection, use, and disclosure of your personal information.
You may withdraw consent at any time, subject to legal or contractual restrictions.
Complaints may be directed to us or to the Office of the Privacy Commissioner of Canada.

9.4 Australia (Privacy Act 1988)

If you are in Australia:

We handle your personal information in accordance with the Australian Privacy Principles (APPs).
You may access and correct your personal information by contacting us.
Your data may be stored overseas (including the United States). We take reasonable steps to ensure overseas recipients comply with the APPs.
Complaints may be directed to us or to the Office of the Australian Information Commissioner (OAIC).

9.5 Brazil (LGPD)

If you are in Brazil, under the LGPD you have the right to:

Confirm whether your data is being processed and access it.
Correct incomplete or inaccurate data.
Anonymize, block, or delete unnecessary or excessive data.
Request portability of your data.
Request deletion of data processed with your consent.
Obtain information about third parties with whom we share data.
Be informed about the consequences of not providing consent.

Contact support@structo.llc or the Autoridade Nacional de Proteção de Dados (ANPD).

9.6 Other Jurisdictions

If you are located in a jurisdiction not listed above, we will comply with applicable local privacy laws. Contact support@structo.llc for jurisdiction-specific requests.

10. International Data Transfers

Your data may be stored and processed on servers located outside your country of residence, including in the United States, through Google's Firebase infrastructure and Google's Gemini AI service. We implement appropriate safeguards for international transfers, including Standard Contractual Clauses where required. By using Structo, you acknowledge these transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify you through the App or by email. Your continued use of Structo after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how your information is handled, contact us at:

Structo LLC
30 N Gould St, STE R
Sheridan, WY 82801, USA
Email: support@structo.llc