Strukto Privacy Policy
Effective date: July 2026
1. Who we are
Strukto is operated by Pradeep Balasubramani, Bengaluru, India. This policy explains how we collect, use, and protect your personal data in compliance with India's Digital Personal Data Protection Act 2023 (DPDP Act), the UAE Personal Data Protection Law (PDPL), and applicable international standards.
2. Data we collect
When you request a demo or create an account:
- Name, company name, work email, phone number
- Subdomain preference and workspace URL
- Event type preferences and business size
When you use the platform:
- Event data, customer contacts, vendor details, proposals, invoices — all data you enter
- Usage logs, feature interactions, error reports
- IP address, browser type, device information
Automatically:
- Cookies for session management and analytics (see Section 7)
3. How we use your data
- To provide, operate, and improve the Strukto platform
- To send you account-related emails (welcome, password reset, expiry notices)
- To notify you about product updates and new features (you may opt out)
- To respond to support requests
- To comply with legal obligations
We do not use your data for advertising. We do not sell your data to third parties.
4. Who we share data with
We share data only with:
- Supabase (database and authentication) — data stored in the US
- Vercel (hosting) — data processed in the US
- Resend (email delivery) — email addresses and email content
- Razorpay (payment processing) — payment details only, not stored by us
All processors are bound by data processing agreements.
5. Data retention
- Active account data: retained while your account is active
- Demo account data: retained for 60 days after demo expiry
- Deleted account data: permanently deleted within 30 days of deletion request
- Backup copies: purged within 90 days
6. Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data (available via the platform)
- Withdraw consent for marketing communications
To exercise these rights, email privacy@strukto.in or hello@strukto.in. We will respond within 30 days.
7. Cookies
We use essential cookies for session management (you cannot opt out of these — they are required for the platform to work) and optional analytics cookies to understand how the platform is used. You may decline analytics cookies via the cookie banner on first visit.
8. Security
We implement industry-standard security measures including encryption at rest and in transit, row-level security (RLS) on all data, and access controls. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.
9. International transfers
Your data may be processed in the United States (Supabase, Vercel, Resend infrastructure). We ensure appropriate safeguards are in place for such transfers.
10. Children
Strukto is not intended for users under 18. We do not knowingly collect data from minors.
11. Changes
We may update this policy. We will notify you by email before material changes take effect.
Contact: privacy@strukto.in or hello@strukto.in