Privacy Policy

1. Introduction

StruKture LLC ("StruKture," "we," "us," or "our") operates the website at strukture.build and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our deck and pergola design tools, purchase plans, or interact with our platform in any way.

By using the Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: First name, last name, email address, and password when you create an account.
• Contact Information: Phone number and mailing/shipping address when voluntarily provided.
• Property Information: Home address or ZIP code entered for satellite imagery lookup, local building code determination, and deck design purposes.
• Project Preferences: Project timeline, build method preference (DIY or hire a pro), material preferences, budget range, property type, and areas of interest.
• Payment Information: Credit/debit card details are processed securely by our payment processor (Stripe) and are never stored on our servers.
• Contractor Applications: Business name, license number, insurance information, portfolio, and interview responses submitted through the contractor application process.
• Communications: Messages sent through our chatbot (Deck 101), support channels, or contact forms.

2.2 Information Collected Automatically

• Device & Browser Data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
• Usage Data: Pages visited, features used (3D builder, plan view, photo view), time spent on pages, click patterns, and deck configurations created.
• Cookies & Similar Technologies: Session cookies for authentication and preferences. See Section 7 for details.

2.3 Information from Third Parties

• Google Maps: When you use "Find My Home," we receive satellite imagery and geocoding data from the Google Maps API. Google's privacy policy applies to data processed by Google.
• Contractor Referrals: If you arrive via a contractor's QR code or referral link, we associate your account with that contractor for lead-tracking purposes.

3. How We Use Your Information

• Provide, operate, and maintain the Service, including generating deck plans, 3D visualizations, and cost estimates.
• Create and manage your account and authenticate your identity.
• Process transactions and send purchase confirmations.
• Personalize your experience by tailoring recommendations to your project preferences and location.
• Determine local building codes, frost depth, snow loads, and permit requirements based on your ZIP code or address.
• Connect you with verified contractors in your area when you opt in to contractor matching.
• Communicate with you about your account, orders, product updates, and promotional offers (with opt-out available).
• Improve the Service through usage analytics and user feedback.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

4. Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Authentication and database hosting (account data, profiles, project configurations). Data is stored in secure, SOC 2 compliant infrastructure.
• Google Maps Platform: Satellite imagery, address autocomplete, and geocoding when using the "Find My Home" feature. Subject to Google's Privacy Policy.
• OpenAI: Powers the Deck 101 chatbot and AI yard analysis features. Conversations and uploaded images are sent to OpenAI for processing. Subject to OpenAI's Privacy Policy.
• Stripe: Payment processing. StruKture never stores your full credit card number. Subject to Stripe's Privacy Policy.
• Vercel: Website hosting and deployment. Subject to Vercel's Privacy Policy.
• Resend: Transactional email delivery (order confirmations, password resets).

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Contractor Matching: If you arrived via a contractor's referral or opt in to contractor matching, we share your name, email, phone (if provided), and project preferences with the matched contractor so they can contact you about your project.
• Service Providers: With third-party vendors who perform services on our behalf (payment processing, email delivery, hosting), under contractual obligations to protect your data.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, with notice to you.
• With Your Consent: For any other purpose with your explicit consent.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., transaction records for tax purposes, which are retained for 7 years).

Deck configurations, plans, and design data are retained for the life of your account so you can access your projects at any time.

7. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication, security, and core functionality. Cannot be disabled.
• Functional Cookies: Remember your preferences (theme, builder settings, saved configurations).
• Analytics Cookies: Help us understand how the Service is used so we can improve it. These may be provided by third-party analytics services.

You can control cookie settings through your browser preferences. Disabling essential cookies may prevent you from using certain features.

8. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure password hashing (never stored in plaintext).
• Row Level Security (RLS) policies on our database ensuring users can only access their own data.
• API key restrictions limiting third-party service access to authorized domains only.
• Server-side processing of sensitive API keys (OpenAI, Stripe) — never exposed to the browser.
• Regular security reviews of our infrastructure and dependencies.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee its absolute security.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Opt-Out: Opt out of promotional communications at any time by clicking "unsubscribe" in any email or contacting us.
• Data Portability: Request your data in a structured, machine-readable format.

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale (we do not sell personal information). To exercise these rights, contact us at privacy@strukture.build.

Utah Residents

Under the Utah Consumer Privacy Act (UCPA), you have the right to access, delete, and obtain a portable copy of your data, and to opt out of targeted advertising and the sale of personal data. Contact us at privacy@strukture.build to exercise these rights.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will promptly delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: