Privacy Policy

Last Updated: February 4, 2026

1. Information We Collect

Seabright Financial Limited dba Structuru (“Company,” “we,” “us”) collects the following categories of information:

Account Information: Name, email address, hashed password, and company name.

Financial Data: PDF invoices, budget CSVs, cost codes, and supplier names uploaded to the platform.

Usage Data: Logs of platform interactions, including human-in-the-loop corrections and feature usage.

2. How We Use Your Data

To provide the invoice extraction and variance analysis service.
To improve our matching algorithms (e.g., learning that “Home Depot” typically maps to a given cost code).
To communicate regarding billing, security updates, and service changes.

3. Sub-Processors (Third-Party Sharing)

To provide our Service, we transmit data to the following trusted third-party providers:

Provider	Location	Purpose
Google Cloud Platform	USA	Hosting, Database, and Document AI extraction
OpenAI	USA	Semantic search and vector embeddings
Paddle	UK	Payment processing

4. International Data Transfers (For EU Customers)

Structuru is located in the United States. Data collected in the European Economic Area (EEA) may be transferred to the US. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your data during transfer.

5. Your Rights (GDPR & CCPA)

Depending on your location, you have the right to:

Access: Request a copy of the data we hold about you.

Rectification: Correct inaccurate data.

Deletion ("Right to be Forgotten"): Request deletion of your account and associated data, subject to our need to retain records for legal or tax purposes.

Export: Receive your data in a structured, machine-readable format (CSV/JSON).

6. Data Retention

We retain Customer Data for the duration of your subscription. Upon termination, data is deleted after 60 days unless a longer retention period is required by law.

7. Data Controller & Processor

In the context of this Service, the Customer acts as the Data Controller (the owner of the invoice and financial data). Structuru acts as the Data Processor (processing data on behalf of the Customer to provide the Service).

To exercise any of these rights or for questions about this policy, contact us at privacy@structuru.com.