Privacy Policy

Structor is an AI-powered software development platform that helps developers inspect applications, diagnose errors, understand failed network requests, work with codebases, and perform AI-assisted development tasks.

Structor is operated by Structor Labs, a company registered in South Africa.

In this policy, “Structor”, “we”, “us”, and “our” refer to that legal entity.

This policy applies to the Structor website, desktop application, account services, subscriptions, AI agents, and associated features.

We process personal information in accordance with applicable privacy laws. Depending on your location and our activities, these may include South Africa’s Protection of Personal Information Act (POPIA), the EU General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws.

2.1 Account and authentication data

We may collect your name, username, email address, account identifier, authentication-related information, preferences, and account status.

You can create an account with an email address or sign in with Google or GitHub. If you use Google or GitHub, we receive basic profile information from that service, such as your name, email address, and profile picture. When you sign in to the desktop application, it receives a revocable session token; your password is never entered into or stored by the application.

2.2 Subscription and payment data

We may process your subscription plan, billing status, invoices, transaction references, payment history, credit balance, and usage records.

Payments are processed by Paddle. Payment information may be handled directly by that provider under its own privacy and security arrangements.

Paddle is the Merchant of Record for our orders. We receive from Paddle the information needed to manage your subscription — such as subscription status, billing period, invoice and transaction references, and limited payment-method details (for example card brand and last four digits) — but not complete card numbers.

We do not intend to store complete payment card details on Structor’s systems where the payment provider processes those details.

2.3 Developer and diagnostic data

Depending on the features you enable, Structor may process:

• Source code and selected project files.
• Repository structures and file paths.
• Prompts, instructions, and conversation history.
• Browser console errors and failed network requests.
• Application logs, terminal output, and test results.
• Command history and results where necessary for an authorised task.
• Technical information about your device, operating system, and application version.

Some of this information may contain personal information, confidential business information, credentials, or other sensitive material. You should avoid exposing secrets or unnecessary personal information to AI tools.

For STRUCTOR AI tasks we also keep task records — the model used, a short title taken from your request, status, token and credit usage, and cost — to meter credits, enforce usage limits, and resolve billing questions. We keep project metadata (such as the project name and your sharing settings), but we do not store your source code in our databases.

If you use your own Anthropic or OpenAI API key, the key is encrypted with your operating system’s keychain on your device and is never sent to Structor.

2.4 Usage, security, and support data

We may collect service usage events, crash reports, security logs, support communications, and information required to investigate errors or suspected misuse.

We may also use essential cookies and similar technologies on our website.

Structor supports both local and remote execution environments.

Local execution: Certain operations may run on your own computer, where the desktop application has been granted access to your files or development environment. Local execution does not necessarily mean that all information remains local. When you use the AI Assistant with your own API key, the application shows you the context it will send and, once you confirm, sends it directly from your computer to the provider you chose (Anthropic or OpenAI). That processing is governed by your own agreement with that provider; Structor does not receive those requests.

Remote execution: STRUCTOR AI runs on remote infrastructure. The first time you use it with a project, the application asks you to confirm before any files are shared. To perform a task, a copy of the project’s files, your request, any context you attach (such as console errors, failed network requests, or selected page elements), command output, and other project context is transmitted to our servers and to Anthropic, which runs the agent in an isolated environment.

The copy excludes files ignored by the project’s .gitignore, dependency and build folders, version-control data, and secret files such as .env files, private keys, and credential files. You can exclude further files in the project settings. The agent’s changes are returned to your computer as a proposed change set, and only the changes you approve are applied.

The information accessed or transmitted depends on the selected agent, task, permissions, and product configuration.

Before using a feature that can modify files or run commands, you should understand its permissions and execution environment. We will describe material processing behaviour through the application and its documentation.

We may use information to:

• Create and manage accounts.
• Provide AI-assisted development features.
• Process and execute user-authorised tasks.
• Analyse errors and produce debugging recommendations.
• Manage subscriptions, credits, payments, and usage limits.
• Provide customer support.
• Detect fraud, abuse, and security threats.
• Maintain and improve service reliability.
• Comply with applicable legal and accounting obligations.

We will use personal information only on an appropriate legal basis and for purposes permitted by applicable law.

Depending on the context, those legal bases may include performing a contract, complying with legal obligations, pursuing legitimate interests, or obtaining consent where required.

Structor may use Anthropic and other supported AI providers to process user requests.

Depending on the feature and task, information shared with an AI provider may include prompts, relevant source code, selected project files, error messages, terminal output, and other context required to perform the task.

Other service providers may support:

• Hosting and remote execution.
• Authentication and databases.
• Payments and subscription management.
• Monitoring, diagnostics, and customer support.
• Email delivery and essential website operations.

The providers we currently use are:

• Anthropic — AI processing for STRUCTOR AI, including the isolated environments in which agent tasks run and temporary storage of the project copy for a task.
• Supabase — authentication and our database (accounts, subscriptions, credit balances, and task records).
• Cloudflare — website hosting and content delivery.
• Paddle — checkout, payments, invoicing, and subscription billing, as Merchant of Record.
• Google and GitHub — optional sign-in, only if you choose to use them.

These providers may process information under their own contractual terms and privacy arrangements.

We will identify the relevant providers and document applicable data-processing, retention, and security arrangements before launch.

We will not claim that AI providers never retain submitted information or never use it for model improvement unless that claim is verified for the actual service and account configuration being used.

You retain ownership of source code and project materials that you own or are otherwise entitled to use.

You authorise Structor to access and process the content you make available, to the extent reasonably necessary to deliver the requested service, maintain security, and comply with applicable law.

We do not claim ownership of your code merely because you use Structor to analyse or modify it.

You are responsible for ensuring that you have permission to submit confidential, employer-owned, client-owned, or third-party code to Structor and any connected AI provider.

Do not submit production credentials, private keys, passwords, or other secrets unless strictly necessary and supported by appropriate safeguards.

Structor may use infrastructure and service providers located in different countries. Your information may therefore be processed outside your country of residence.

Where applicable law requires safeguards for international transfers, we will implement an appropriate transfer mechanism, contractual protections, or another legally recognised basis for the transfer.

For example, transfers subject to the GDPR may require an adequacy decision or other permitted safeguards. Transfers subject to POPIA must satisfy the applicable requirements for cross-border transfers.

We retain information for as long as reasonably necessary for the purposes described in this policy, including service delivery, account management, security, dispute resolution, and legal compliance.

Different retention periods may apply to:

• Account and authentication data.
• AI prompts and conversation history.
• Source code and remote task files.
• Application and terminal logs.
• Billing and transaction records.
• Backups and security records.

The project copy uploaded for a STRUCTOR AI task is deleted from our AI provider’s file storage once the task ends. The task’s session — including the agent’s messages, command output, and its proposed changes — is archived with Anthropic and retained under its applicable data-retention terms. Task records and billing records are kept with your account for billing, usage-limit, and legal purposes.

We will establish and publish retention periods consistent with the actual system design and applicable legal requirements.

Closing an account does not necessarily delete records that must be retained by law or that remain in protected backups until their scheduled deletion.

You may request access to or deletion of eligible personal information by contacting support@structor.pro.

We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, loss, alteration, disclosure, and destruction.

Security measures will be implemented according to the risks associated with the information and features provided.

No online service can guarantee absolute security. You are responsible for securing your account, reviewing agent permissions, maintaining suitable backups, and protecting your development environment.

We will handle security incidents and personal data breaches in accordance with applicable law.

Depending on your location and applicable law, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of eligible information.
• Object to or restrict certain processing.
• Request portability of certain information.
• Withdraw consent where processing relies on consent.
• Lodge a complaint with the relevant data protection authority.

Contact support@structor.pro to exercise your rights.

We may need to verify your identity before responding. Some information may be retained where the law permits or requires it.

If GDPR applies to your information, you may also have rights relating to certain automated decision-making and profiling.

We may use essential cookies to maintain sessions, protect accounts, and provide website functionality.

If analytics or non-essential tracking technologies are introduced, we will provide notices and obtain consent where required by applicable law.

You can manage cookies through your browser settings, although some functionality may be affected.

Structor is not intended for children who are not legally permitted to use the service under applicable law.

We do not knowingly collect children’s personal information in circumstances where doing so would be unlawful. If you believe this has occurred, contact support@structor.pro.

We may update this policy to reflect changes in our services, technology providers, processing practices, or legal obligations.

We will publish the revised policy and update its effective date. Where required, we will provide notice or obtain consent before implementing material changes.

General support: support@structor.pro
Website: structor.pro

For privacy requests, security concerns, or questions about how your information is processed, contact us using the details above.