STRUCTAThis Data Processing Agreement (“DPA”) forms part of the Terms of Service between Structa Technologies Inc. (“Structa”, “we”) and the business using the service (“you”). It describes how we process personal data on your behalf. Where it conflicts with the Terms on the subject of personal data, this DPA wins.
1. Roles
For the personal data you put into Structa about your own clients, guests and employees, you are the controller and Structa is the processor: you decide what to collect and why, and we process it only to provide the service. For the data we hold about you as our customer — your account, your billing — Structa is the controller, and our Privacy Policy describes that.
2. What we process, and why
- Your clients’ data — names, contact details, bookings, visit history, and any notes or custom fields you choose to record. Processed to operate the modules you have enabled.
- Your employees’ data — names, sign-in credentials, roles, shifts, time entries, and wages where you use those modules.
- Payment data — handled by Stripe. Card numbers never reach Structa’s servers.
We process this data only on your documented instructions — which, in practice, means the actions you and your staff take in the product — except where the law requires otherwise.
3. Confidentiality and security
Access is restricted to personnel who need it to run and support the service, and they are bound by confidentiality. Each business’s data is isolated at the database level by row-level security, and access inside a business is further limited by the modules and role you assign to each person. Our Security page describes the current measures.
4. Subprocessors
We engage the providers below to deliver the service. Each is bound by terms no less protective than this DPA, and we remain responsible for their performance.
- Supabase — database, authentication and file storage (United States).
- Vercel — application hosting and delivery (United States).
- Railway — hosting for the voice bridge, the small service that connects a live call to the receptionist. Only if you enable the voice channel; the audio and the transcript of those calls pass through it (United States).
- Stripe — subscription billing and, where you enable it, guest payments.
- Resend — transactional and guest-facing email.
- Anthropic — powers the optional AI features. Data is sent only when someone uses them, and only from the modules that person can already see.
- OpenAI — the AI receptionist’s voice channel, if you enable it: it receives the live audio of those calls, including whatever the caller says, so the receptionist can hear and answer in real time. It also drafts inbox replies where that is configured to run on an OpenAI model instead of Anthropic.
- Twilio — the receptionist’s phone line, if you enable it.
- Gelato — printed employee cards, only when you order them: the orderer’s name, shipping address, email and phone, and the card artwork carrying the employee names and titles printed on the cards.
- ShipStation — shipping and label printing, only when you connect your own ShipStation account: the recipient’s name, phone and shipping address and the order lines for each delivery, read back the same way to keep the delivery list in step.
- Pipedream — connected apps, only when you connect one: it performs the sign-in to that app (Google, Slack, QuickBooks and others) and holds the resulting access token on your behalf, refreshing it so the connection keeps working. That token is the standing permission you granted, so Pipedream can reach the connected account whenever Structa asks it to. Structa never receives or stores those credentials. Disconnecting an app deletes the stored sign-in at Pipedream, and permanently deleting your business deletes every one of them — in both cases the app’s own account settings remain the place to withdraw the permission at its source.
- Apple — push notifications to the iOS app; a notification’s text passes through Apple’s push service and can name a client and an appointment time.
- Sentry — error telemetry from our servers and apps, scrubbed of message bodies, cookies and credentials before it leaves; it can still carry identifiers such as a business or booking id.
- Cloudflare — the Turnstile human check on the signup and request-access forms; browser and network details for that check only.
Two further providers handle call audio inside Twilio’s own service, not under a contract of ours, on calls that run through Twilio’s relay rather than the path above: Deepgram transcribes what the caller says, and ElevenLabs speaks the reply. We name them because your callers’ voices reach them; Twilio, not Structa, is responsible for their terms.
We will give notice before adding a subprocessor that processes your clients’ personal data, so you have a chance to object.
5. International transfers
Our infrastructure is operated in the United States. Where you or your clients are in a jurisdiction that restricts transfers, the transfer is made under the appropriate safeguards for that jurisdiction, and the subprocessors above are engaged on the same basis.
6. Your rights, and your clients’
The product is built so you can answer your clients directly: you can read, correct and delete any client record yourself, and export your business’s data at any time from Owner setup. If you receive a request you cannot satisfy in the product, contact us and we will help within the time the law allows.
7. Personal data breach
If we become aware of a breach affecting personal data we process for you, we will notify you without undue delay, with what we know and what we are doing about it, so you can meet your own notification duties.
8. Deletion and return
You can export your data at any time, including after you close your business. Closing does not delete anything — it ends the subscription and locks the workspace, so your data is still there if you change your mind.
To have it removed, ask for permanent deletion from the screen a closed business shows. We wait 30 days and email you the date, so a mistaken or unauthorised request can be caught; after that we permanently delete the personal data we process for you. The only things we keep are records we are legally required to retain — billing and tax records — and the suppression list that stops us emailing an address that asked us not to.
9. Audit
On reasonable request we will provide the information needed to demonstrate compliance with this DPA, including our security documentation.
10. Contact
Questions about this DPA, or a data request you need help with: security@structainc.com.