Privacy Policy

When you use Straktu, we collect:

• Account information: email address, name, and authentication provider details (Google OAuth or magic link)
• Professional profile: firm name, engineer name, professional license numbers, and address \u2014 provided by you for PDF permit documents
• Calculation data: inputs, outputs, and project metadata from calculations you perform
• Usage data: pages visited, features used, and PDF generation events \u2014 collected for product improvement

We do not collect payment card details \u2014 payments are processed by Paddle, our third-party payment provider.

We use your information to:

• Provide, maintain, and improve the Service
• Process your subscription and manage billing (via Paddle)
• Generate PDF calculation documents with your professional credentials
• Communicate with you about your account, updates, and support requests
• Analyze usage patterns to improve the product and inform feature development

We do not sell your personal information to third parties.

We use the following third-party services to operate Straktu. Each provider has its own privacy and security practices:

• Supabase \u2014 authentication, database hosting, and file storage. Supabase Privacy Policy
• Paddle \u2014 subscription management and payment processing. Paddle Privacy Policy
• Vercel \u2014 application hosting and content delivery. Vercel Privacy Policy

We retain your account information and calculation data for as long as your account is active. You may request deletion of your data at any time by contacting us.

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS) and at rest
• Secure authentication via Supabase Auth
• Regular security reviews of our infrastructure

While we take reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct inaccurate or incomplete data
• Deletion:request that we delete your personal data (“right to be forgotten”)
• Portability: request a copy of your data in a structured, machine-readable format
• Objection: object to certain processing of your data

To exercise any of these rights, contact us at support@straktu.com. We will respond within 30 days.

Your data is processed and stored on servers operated by Supabase and Vercel in regions selected by Straktu. By using the Service, you consent to the transfer of your data to these servers. We take appropriate safeguards to ensure your data remains protected regardless of where it is processed.

For privacy-related inquiries or to exercise your data rights, contact us at support@straktu.com.