Privacy Policy

Effective: TODO: effective dateLast updated: TODO: date

This policy explains how Structure Applied LLC (“Structure Applied”, “we”, “us”) handles information in the Structure desktop app (“Structure” or “the app”), the Structure waitlist, and this website at structureapplied.com/structure. TODO: confirm the app name on Google's consent screen: “Structure” (site) vs “Structure Companion” (desktop build productName)

Structure is not released yet. Parts of this policy, including the Google connectors, describe how the app is being built to work. We will update this policy before those features ship if anything changes.

The short version

• Structure runs on your computer, or on another computer you set up as your Structure host. With a local model, your conversations are processed there and not on our servers.
• Cloud models are optional. If you choose one, your prompts and conversation context go to that provider. The app tells you where data goes before you use one.
• If you connect Google, Structure asks only for the access each feature needs, keeps your sign-in tokens encrypted on your computer, and talks to Google directly from your computer.
• We don't sell your data, use it for ads, or use Google data to train AI models.
• The website has no analytics and sets no cookies. The waitlist stores your email address, when and on which page you signed up, and your browser type. It doesn't store your IP address.

1. How the app handles your data

Structure is a local-first AI assistant. You install it on your own computer and connect it to a model server, such as Ollama, running on that computer or on another computer you set up as your Structure host.

• Local processing. When you use a local model, your messages, files you add, and the assistant's replies are processed and stored on your computer or your Structure host. They are not sent to us.
• No analytics in the app. The app has no analytics, advertising, or tracking code. TODO: confirm crash reporting and update checks before launch; none exist today
• Your files stay yours. Conversations, projects and settings live in the app's data folders on your computer or host. You can delete them at any time (see section 6).

2. Optional cloud models

You can choose to use a cloud model instead of a local one. Today the app offers xAI as a cloud provider, and more providers may be added.

• When a cloud model is active, the prompts you send and the conversation context the model needs to answer are sent to that provider over the internet, and its own terms and privacy policy apply. For xAI, prompts go to api.x.ai and usage is billed to your xAI account.
• The app shows where prompts go before you switch to a cloud model, and you can switch back to a local model at any time.
• Your cloud provider key or sign-in is stored on your computer. We never receive it.
• Google data and cloud models. Information Structure receives from Google (see section 3) is kept on your computer and is not included in what Structure sends to a cloud model. TODO: steller: confirm this matches the shipped egress rules before publishing; see open question 1

3. Google account access

Structure can optionally connect to your Google account so you can save files to Google Drive, send email from Gmail, and add events to Google Calendar. You connect each one yourself, in the app, on Google's own sign-in page. Structure asks only for the permissions (“scopes”) below.

Structure may also receive your Google account's email address, so it can show which account is connected. TODO: confirm how the account email is obtained; if the basic “openid email” scopes are added, list them in this table Structure does not ask for permission to read your Gmail.

4. How we handle Google user data

• Tokens stay on your computer. When you connect Google, the sign-in tokens are encrypted and stored on your computer, using a key protected by your operating system's secure storage (macOS Keychain, Windows Data Protection, or the Linux Secret Service). If secure storage isn't available, Structure won't save the tokens.
• Direct connection to Google. Structure calls Google's APIs directly from your computer or your Structure host. No Google user data is sent to our servers.
• Used only for the features you use. We use Google user data only to provide the features described in section 3, which you can see in the app.
• Not sold, not used for ads. We do not sell Google user data or use it for advertising, and we do not use it to determine credit-worthiness or for lending.
• No AI training. We do not use Google user data to create, train, or improve AI or machine-learning models.
• No human access. We don't read your Google data. Because it stays on your computer, we have no copy to read.
• Shared only as needed to provide the feature. Files, emails and events go to Google, because that's what you asked Structure to do. We don't transfer Google user data to anyone else, except where the law requires it.

5. Google API Limited Use

Structure's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Revoking access and deleting data

Disconnect Google

• In the app: open Settings, then Connections, and choose Disconnect next to your Google account. Structure asks Google to revoke its access and deletes the stored tokens from your computer. TODO: confirm final menu path when built
• In your Google account: go to myaccount.google.com/permissions, choose Structure, and remove its access. This works even if the app is no longer installed.

Delete your data

• Your conversations, projects, and settings are stored on your computer or Structure host. You can delete them in the app, or delete the app's data folder when you uninstall. TODO: list the data folder paths per OS
• Files, emails, and events Structure created in your Google account belong to you. You can delete them in Drive, Gmail, or Calendar.
• To remove your email address from the waitlist, use the unsubscribe link in any waitlist email, or email us (see Contact).

7. Using Structure from other devices

You can connect another computer or your phone to your Structure host. These connections are encrypted between your device and your host. TODO: steller: if a hosted relay at a structureapplied.com address will route these connections, describe it here, including what it can see (connection metadata such as IP addresses and timing) and that it cannot read the encrypted contents. Remove this line if no relay ships.

8. Waitlist emails

• What we store. When you join the waitlist we store your email address, the date and time you signed up, the page you signed up on, the role you picked if the form asked (for example “agent” or “brokerage”), and your browser type (the user-agent string your browser sends, shortened). The website does not store your IP address.
• How we use it. Only to tell you about Structure's launch and closely related product news. We don't sell or share your address.
• Where it's stored. Cloudflare, Inc. hosts this website and stores the waitlist in its Cloudflare D1 database, as our processor.
• Removal. Every email has an unsubscribe link. To be removed at any time, email support@structureapplied.com from the address you signed up with and we will delete it. We keep your address until you unsubscribe or ask us to delete it, or until we stop running the waitlist. TODO: retention period

9. This website

• The website has no analytics, advertising, or tracking, and sets no cookies. Fonts and images are served from this site, not from third parties.
• Our hosting provider, Cloudflare, Inc. (Cloudflare Pages), receives standard technical information when you visit, such as your IP address and browser type, to deliver the site and protect it from abuse. Cloudflare's own privacy policy applies to that processing. The site itself doesn't keep a log of IP addresses.
• The hardware checker on the home page runs in your browser. Your selections are not sent anywhere.

10. Security

We design Structure to keep data on your devices, encrypt stored credentials with your operating system's protection, and ask for your approval before anything leaves your computer. No system is perfectly secure. Keep your computer, operating-system account, and Google account protected.

11. Children

Structure and this website are not directed to children under 13 TODO: confirm age threshold, e.g. 13 or 16 in some regions, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

12. Your choices and rights

Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you, or to object to how we use it. In practice, the only personal information we hold is your waitlist sign-up (see section 8). To make a request, email support@structureapplied.com. We won't treat you differently for using these rights.

13. Changes to this policy

We will post changes on this page and update the date above. If we change how Structure uses Google user data, we will tell you in the app and ask for your consent before using it in the new way.

14. Contact

Structure Applied LLC
Email: support@structureapplied.com
Postal address: TODO: postal address, if required