Privacy Policy

1. Scope

This Privacy Policy applies when you:

• Visit our website (the "Site")
• Create an account or use the Service
• Request a demo or contact us
• Receive communications from us

2. What Is Personal Data

"Personal Data" means information that identifies, relates to, or could reasonably be linked to an individual.

This does not include information that has been aggregated or de-identified.

3. Information We Collect

4. How We Use Personal Data

We use Personal Data to:

• Provide and operate the Service
• Authenticate users and manage access
• Store and manage project information
• Maintain platform security and prevent misuse
• Provide customer support
• Improve performance, reliability, and features
• Send service-related communications (e.g., security notices, system updates)
• Send occasional product updates or announcements (you may opt out)
• Comply with legal obligations

5. Cookies and Website Analytics

Our Site may use cookies or similar technologies to:

• Maintain secure sessions
• Remember preferences
• Understand website usage and performance

6. Disclosure of Personal Data

We may disclose Personal Data to:

• Cloud hosting and infrastructure providers (e.g., AWS or similar services)
• Technology providers that support platform functionality (database, authentication, monitoring, email delivery, or analytics tools)
• Professional advisers (legal, accounting, insurance)
• Law enforcement, regulators, or authorities where required by law
• A purchaser or successor in the event of a business sale, merger, or restructuring

7. Overseas Data Transfers

StruxVault is based in Australia, but our service providers may be located in the United States or other countries.

By using the Service, you acknowledge that your information may be transferred outside your country. We take reasonable steps to ensure that overseas recipients handle Personal Data in accordance with applicable privacy laws.

8. Data Security

We take reasonable technical and organizational measures designed to protect Personal Data, including:

• Encryption in transit (HTTPS/TLS)
• Secure cloud infrastructure
• Role-based access controls and authentication
• System monitoring, logging, and audit trails
• Restricted internal access on a need-to-know basis

9. Data Retention

We retain Personal Data:

• While your account is active
• As needed to provide the Service
• As required for legal, security, or legitimate business purposes

10. Your Rights

You may request:

• Access to your Personal Data
• Correction of inaccurate information
• Deletion of your Personal Data (subject to legal or contractual limits)
• Account closure
• Opt-out of marketing communications

11. Australia – Privacy Act (APP)

If you are located in Australia, this policy is intended to comply with the Australian Privacy Principles (APPs). You have the right to request access to and correction of Personal Data we hold about you.

If you have a privacy complaint, please contact us first. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the right to request access, deletion, or correction of your Personal Information, opt out of sale or sharing, and not be discriminated against for exercising your rights.

13. Children

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect Personal Data from children.

14. Third-Party Services

The Service may include links to or integrations with third-party services. Their privacy practices are governed by their own policies.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our Site with a revised "Last updated" date.

16. Contact