Privacy Policy
Effective date: November 19, 2025
Contact: legal@structure.fi
Applies to: Public websites at structure.fi and docs.structure.fi that link to this policy, including marketing pages, public documentation, legal pages, waitlist or newsletter forms, and emails users voluntarily send to Structure.
Does not apply to: The Structure web app, API, MCP server, connected trading accounts, wallet sign-in, KYC, trading-account integrations, or other product features covered by a separate in-app notice or product privacy notice.
1) Who we are
Structure Financial Inc. ("Structure," "we," "us," or "our") is the controller for personal data processed on the public websites covered by this Privacy Policy.
Registered address: Craigmuir Chambers, Road Town, Tortola VG 1110, British Virgin Islands
Privacy and security contact: legal@structure.fi
2) Scope And Geographic Coverage
This Privacy Policy applies to public websites operated by Structure that link to this policy, including structure.fi and the public documentation site at docs.structure.fi.
The public documentation can be browsed without creating a Structure account, connecting a wallet, connecting a trading account, completing KYC, providing private keys, or providing trading credentials.
This Privacy Policy does not cover the Structure web app, API, MCP server, connected trading accounts, wallet sign-in, KYC, trading-account integrations, or other product features covered by a separate in-app notice or product privacy notice.
This policy applies worldwide, except in countries or regions subject to sanctions or embargoes under laws applicable to us and our service providers, including measures administered by the U.S. OFAC, UK, EU, UN, or other competent authorities. We do not intentionally make the public websites available to, or process personal information of, individuals in those sanctioned countries or regions or other locations where access is unlawful.
3) What We Collect On Public Websites
Information you provide:
Email addresses and related information you submit through waitlist, newsletter, contact, or feedback forms. Structure stores submitted email addresses in Structure-controlled private cloud systems for requested communications and related operational records.
Emails, messages, attachments, and contact details you voluntarily send to Structure, including legal, privacy, security, support, or docs-feedback emails.
Information collected automatically:
Hosting, CDN, WAF, security, and HTTP log information processed by our service providers (Framer for site hosting, Cloudflare for documentation hosting, CDN and WAF, and Google Cloud Platform for log storage), which may include IP address, user agent, referrer, requested URL or path, timestamps, device and browser metadata, country-level location inferred from IP address, and related technical information used to operate, secure, debug, and protect the public websites.
Not collected through public documentation browsing:
No Structure account is required to browse public documentation.
No wallet connection is required to browse public documentation.
No trading account connection is required to browse public documentation.
No KYC is required to browse public documentation.
No private key, seed phrase, or trading credential is required to browse public documentation.
Documentation search runs locally in your browser using a static search index. Structure does not receive the text you type into the documentation search box as a separate search query. Hosting, CDN, WAF, security, and HTTP logs can still record requested URLs, paths, assets, timestamps, IP address, user agent, referrer, and related technical metadata.
4) How We Use Your Information
EU/UK legal bases are shown in parentheses where applicable.
Send early-access updates, product news, or other communications you requested (consent).
Respond to legal, privacy, security, support, docs-feedback, or other messages you send to Structure (legitimate interests; legal obligation where applicable).
Operate, deliver, secure, debug, monitor, and improve the public websites and public documentation (legitimate interests).
Prevent fraud, abuse, security incidents, unauthorized access, scraping, misuse, and violations of our Terms (legitimate interests; legal obligation where applicable).
Comply with law, sanctions, export controls, legal process, and enforceable government requests (legal obligation; legitimate interests).
Enforce our Terms and protect Structure, users, visitors, and third parties (legitimate interests).
5) Cookies And Similar Technologies
We do not use analytics, session replay, advertising/retargeting pixels, or non-essential cookies on the public websites today. Our hosting, CDN, WAF, docs-hosting, email-delivery, and security providers may set strictly necessary cookies or process similar technical information for security, delivery, performance, requested communications, and abuse-prevention purposes.
Because we only use essential cookies today, a cookie-consent banner is not shown. If that changes, we will update this Privacy Policy and implement any required consent flows.
6) Sharing Your Information
We disclose public-site and documentation-site data only to:
Service providers acting on our instructions, such as hosting, CDN, WAF, security, email delivery, support, documentation hosting, private cloud infrastructure, and operational vendors. Current providers include Framer.com for the root site, Cloudflare for the docs site, Google for email, and Google Cloud Platform for log storage.
Legal, safety, compliance, and security recipients where required by law or necessary to protect rights, security, compliance, users, visitors, Structure, or third parties.
Professional advisers, business transaction counterparties, or authorities where permitted by law and relevant to corporate, legal, security, or compliance matters.
We do not sell personal information or "share" personal information for cross-context behavioral advertising under U.S. state privacy laws.
7) International Transfers
We may transfer personal data internationally (for example, to the United States) in connection with our providers. Where required, we use appropriate safeguards (e.g., European Commission Standard Contractual Clauses and the UK Addendum) to protect personal data transferred outside your jurisdiction.
8) Data Retention
Email signups and requested communications: we keep your email address while you are subscribed and for up to 24 months after your last interaction (for example, opening or clicking one of our emails), after which it is deleted. If you unsubscribe, we stop marketing to you and keep a minimal record of your email on a suppression list to honor your opt-out.
Legal, privacy, security, support, and docs-feedback emails: retained for up to 24 months after the matter is resolved, and longer only where necessary to comply with law, resolve disputes, or protect rights and security.
Hosting, CDN, WAF, security, and HTTP logs: retained for up to 24 months, with earlier deletion where feasible, unless a longer period is necessary to investigate a security issue, comply with law, or resolve a dispute.
We delete or anonymize personal data when it is no longer needed for the purposes above, subject to legal retention obligations.
9) Security
We implement administrative, technical, and organizational measures appropriate to the risk, including protections provided by our hosting, CDN, WAF, security, and infrastructure providers, to help safeguard personal data processed on the public websites. No method of transmission or storage is 100% secure.
10) Your Privacy Rights
EU and UK (GDPR / UK GDPR)
If you are in the EU/EEA or the UK, you have the right to access, rectify, erase, restrict, or object to processing, and the right to data portability. Where processing relies on consent (for example, our emails), you may withdraw consent at any time without affecting processing carried out before withdrawal.
We aim to respond to your request within one month (Article 12(3)), and we will tell you if we need a permitted extension.
You may also lodge a complaint with your local supervisory authority. In France, this is the CNIL (www.cnil.fr).
United States (including California)
Depending on your state, you may have rights to know or access, delete, and correct personal information, and to appeal a denial of your request. We do not sell or share personal information and do not use or disclose sensitive personal information for purposes that require a "right to limit." If we introduce ad tech, we will provide an opt-out of sale or share and honor Global Privacy Control (GPC) where required.
Submitting a request (all regions): email legal@structure.fi describing your request. We verify requests by confirming control of your email and may request limited additional information where allowed by law.
Appeals (U.S. states where applicable): if we deny your request, reply with "Appeal" and we will review again.
11) Your Choices
Unsubscribe from emails: use the unsubscribe link in any message or email legal@structure.fi.
Browser controls: you can block cookies; however, we rely only on strictly necessary hosting/security cookies on the public websites. We do not respond to legacy Do Not Track signals.
12) Children
The site is intended for adults (18+) and is not directed to minors.
13) Product Features And On-Chain Data
This Privacy Policy covers the public websites and public documentation. Product features, the Structure web app, API, MCP server, connected trading accounts, wallet sign-in, KYC, trading-account integrations, and other in-app services may be covered by separate product terms or privacy notices.
Public documentation may describe account, wallet, trading, backtest, and venue workflows, but reading public documentation does not by itself create a Structure account, connect a wallet, connect a trading account, complete KYC, provide private keys, or provide trading credentials.
14) Changes To This Policy
If we make material changes, we will display an in-site banner and update the Effective date above.
15) Contact Us
Email: legal@structure.fi
Postal: Structure Financial Inc., Craigmuir Chambers, Road Town, Tortola VG 1110, British Virgin Islands
