Last updated: 3 July 2026
This Privacy Policy explains how the operator of Astruct (Astruct, we, us or our) collects, uses, discloses and protects your personal information when you use astruct.io and related services (the Service). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). By using the Service you agree to this Policy. It should be read together with our Terms of Use.
We collect the following categories of personal information:
We collect information directly from you when you create an account, use the Service, connect an account, or contact us; automatically through cookies, our analytics and, where enabled, the Meta pixel; and from third parties such as authentication and payment providers acting on your instructions.
We use personal information to:
We do not sell your personal information. We do not use Your Content to train our own or third parties’ foundation models.
To generate outputs, we transmit your prompts and relevant parts of Your Content to third-party AI providers (which may include Anthropic and OpenAI) for processing. We also use infrastructure and service providers to run the Service, including Supabase (database, authentication and file storage), Vercel (hosting), and, where you enable it, Google APIs (for connected Gmail, Calendar and Drive) and Meta (advertising analytics). These providers process data on our behalf or, in the case of AI and connected services, to deliver the functionality you request. Under our arrangements, our AI providers do not use your inputs or outputs to train their models on an opt-out or enterprise basis where available. Each provider handles data under its own terms and privacy policy.
Astruct’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access Google user data only to provide and improve the features you have connected (for example reading recent emails, calendar events or Drive file metadata at your request), we do not use it for advertising, and we do not sell it or transfer it to third parties except as necessary to provide the Service, comply with law, or with your consent. You can disconnect a Google connection at any time on the Connectors page, and revoke access from your Google Account settings.
We use essential cookies to keep you signed in and to operate the Service, and we may use analytics and, where enabled, the Meta pixel to understand usage and measure marketing. You can control cookies through your browser. Disabling essential cookies may prevent the Service from working.
We disclose personal information to the service providers described above, to professional advisers, to a purchaser in connection with a business sale, and where required or authorised by law. Some of our providers store or process data outside Australia (for example in the United States and the European Union). Where we disclose information overseas, we take reasonable steps to ensure it is handled consistently with the APPs, but you acknowledge that overseas recipients may be subject to different laws.
We take reasonable steps to protect personal information, including encryption in transit, access controls, row-level security on user data, private file storage with scoped access, and restricting access to authorised personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of an eligible data breach, we will respond in accordance with the Notifiable Data Breaches scheme.
We retain personal information for as long as needed to provide the Service and for legitimate business and legal purposes. Your threads, projects and generated documents are retained until you delete them or close your account, subject to short-term backups. Uploaded files sent to AI providers for processing are handled according to those providers’ retention practices, and files we ingest for a request are removed from our processing pipeline after use.
Under the APPs you may request access to, and correction of, the personal information we hold about you. You can update account details in the app, delete individual threads, projects and documents, and request account deletion. To make a request, contact us using the details below. We may need to verify your identity, and some information may be retained where required by law.
If you have a privacy concern, contact us and we will investigate and respond. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
The Service is not directed to, and is not intended for, individuals under 18. We do not knowingly collect personal information from children.
We may update this Policy from time to time. The current version is always available at astruct.io/privacy, with the “Last updated” date shown above. Material changes will be notified by in-product notice or email where appropriate.
Privacy enquiries: hello@astruct.io · See also our Terms of Use