Privacy Policy for Structure Hub
Last Updated: June 15, 2026
Structure Hub respects your privacy and is committed to protecting the personal information and business data you share with us. This Privacy Policy explains what information we collect, how we use it, how we protect it, and what rights you have regarding your data.
This Privacy Policy applies to the Structure Hub website, platform, SaaS services hosted in MTD Cloud, private deployments, enterprise services, and related support or onboarding activities.
1. Information We Collect
We may collect information that you provide directly to us, information generated through your use of Structure Hub, and information required to operate, secure, and improve the platform.
1.1 Account and Contact Information
We may collect:
- Name and surname
- Business email address
- Company name
- Job title or role
- Phone number, where provided
- Account credentials and authentication information
- Communication preferences
1.2 Workspace and User Information
When your organization uses Structure Hub, we may collect:
- Workspace name and configuration
- User roles and access permissions
- Team or organization membership
- Activity logs related to platform usage
- Audit logs required for security, governance, and compliance
1.3 Infrastructure and Integration Data
Depending on the features enabled by your organization, Structure Hub may process technical metadata from connected systems, including:
- Cloud resource metadata from platforms such as AWS, Azure, or other supported environments
- Infrastructure relationships, dependencies, and configuration metadata
- Repository metadata, application structure, and deployment references
- System, service, and environment mappings
- Architecture diagram data generated from connected infrastructure and application sources
- Change history, versioning, and monitoring events
Structure Hub is designed to process the minimum data necessary to provide architecture visibility, documentation, governance, and operational insights. Access to customer environments should be configured using strictly scoped permissions.
1.4 Payment and Billing Information
For paid plans, we may collect or process billing-related information such as:
- Billing contact details
- Company billing information
- Subscription plan details
- Transaction references
- Invoice information
Payment card or banking data may be processed by third-party payment providers where applicable. Structure Hub does not intend to store full payment card details directly in the platform.
1.5 Usage, Device, and Technical Data
We may collect technical information about how the platform is accessed and used, including:
- IP address
- Browser type and version
- Device information
- Operating system
- Log-in and log-out events
- Pages, features, and actions used within the platform
- Performance, diagnostic, and error data
- Security events and access logs
1.6 Communications and Support Data
When you contact us, request support, participate in onboarding, or communicate with our team, we may collect:
- Messages, emails, and support requests
- Meeting notes or implementation requirements
- Feedback, product requests, and roadmap input
- Information required to investigate and resolve technical issues
2. How We Use Your Information
We use the information we collect to operate, improve, secure, and support Structure Hub.
We may use your information to:
- Provide access to the Structure Hub platform
- Create and manage user accounts and workspaces
- Generate infrastructure and application diagrams
- Generate and maintain architecture documentation
- Provide version control, change monitoring, governance insights, and audit support
- Enable cloud, repository, and enterprise integrations
- Process subscriptions, billing, and invoices
- Provide onboarding, customer success, and technical support
- Monitor platform performance, reliability, and security
- Detect, prevent, and investigate unauthorized access, abuse, or security incidents
- Improve existing features and develop new platform capabilities
- Send service-related communications, product updates, and important notices
- Comply with legal, contractual, regulatory, and security obligations
Where required by applicable law, we rely on appropriate legal bases for processing personal data, such as contract performance, legitimate interests, legal obligations, or consent.
3. Hosting and Deployment Model
Structure Hub may be provided through different deployment models depending on the customer plan.
3.1 SaaS in MTD Cloud
For SaaS customers, Structure Hub is hosted and operated in MTD Cloud. Customer data is managed through a dedicated tenant within the shared SaaS platform.
3.2 Enterprise and Co Create Deployments
For Enterprise or Co Create customers, Structure Hub may be deployed in a private environment, including customer cloud infrastructure, dedicated cloud environments, or on-premise infrastructure, depending on the agreed delivery model.
The exact hosting, data residency, access, and operational responsibilities may be further defined in the applicable agreement, order form, data processing agreement, or enterprise contract.
4. Information Sharing
We do not sell your personal information.
We may share information only where necessary to provide, secure, support, or legally operate Structure Hub.
We may share information with:
- Service providers who support hosting, infrastructure, analytics, payment processing, communication, monitoring, or customer support
- Cloud providers and infrastructure partners required to operate the selected deployment model
- Professional advisers, such as legal, accounting, compliance, or security advisers
- Business partners or integration providers, where enabled or requested by your organization
- Legal authorities, regulators, courts, or public bodies when required by law or necessary to protect legal rights
- Successors or potential successors in the event of a merger, acquisition, restructuring, or transfer of business assets
Where third parties process personal data on our behalf, we require appropriate confidentiality, security, and data protection obligations.
5. Data Security
We implement appropriate technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
- Access controls and role-based permissions
- Authentication and authorization mechanisms
- Encryption in transit and, where applicable, encryption at rest
- Audit logs and security monitoring
- Secure infrastructure configuration
- Environment separation and tenant isolation controls
- Backup and recovery practices
- Vulnerability management and security reviews
- Internal access restrictions based on least-privilege principles
No system can be guaranteed to be completely secure. Customers are responsible for configuring access permissions, integrations, credentials, and connected environments securely.
6. Data Retention
We retain personal information and customer data only for as long as necessary to provide Structure Hub, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business purposes.
Retention periods may vary depending on:
- The type of data
- The selected subscription or deployment model
- Contractual requirements
- Legal or regulatory obligations
- Customer configuration and deletion requests
When data is no longer required, we will delete, anonymize, or securely retain it where legally necessary.
7. Your Rights
Depending on your location and applicable law, you may have certain rights regarding your personal data.
These rights may include the right to:
- Access your personal information
- Request correction of inaccurate or incomplete data
- Request deletion of your personal information
- Request restriction of processing
- Object to certain processing activities
- Withdraw consent where processing is based on consent
- Request export or portability of your data
- Opt out of marketing communications
- Lodge a complaint with a competent data protection authority
To exercise your rights, contact us at privacy@structurehub.io.
We may need to verify your identity before processing certain requests.
8. Customer Data and Organisational Control
Where Structure Hub is used by an organization, the organization may control certain data, user access, integrations, retention settings, and workspace configurations.
If your account is provided by your employer, client, or another organization, that organization may be responsible for managing your access and may have the ability to view or administer data associated with your workspace.
For requests related to organisational data, we may direct you to the relevant workspace owner or account administrator.
9. Cookies and Similar Technologies
Structure Hub may use cookies or similar technologies to operate the website and platform, maintain sessions, improve performance, analyze usage, and enhance security.
Cookies may be used for:
- Authentication and session management
- Security and fraud prevention
- User preferences
- Product analytics and performance monitoring
- Website functionality
Where required by law, we will request consent for non-essential cookies.
10. International Data Transfers
Depending on the selected deployment model, service providers, and customer location, information may be processed in countries other than the country where you are located.
Where applicable, we use appropriate safeguards for international data transfers, such as contractual protections, technical security controls, and other mechanisms required by applicable data protection laws.
11. Marketing Communications
We may send marketing communications about Structure Hub features, product updates, events, or related services where permitted by law.
You can opt out of marketing communications at any time by using the unsubscribe link in the email or by contacting us at privacy@structurehub.io.
Service-related messages, security notifications, billing notices, and important platform updates may still be sent where necessary.
12. Children's Privacy
Structure Hub is intended for business and professional use. It is not intended for children, and we do not knowingly collect personal information from children.
If you believe that a child has provided personal information to us, please contact us at privacy@structurehub.io.
13. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, security practices, or business operations.
When we make material changes, we may notify users through email, platform notice, or website notice. The updated policy will be effective from the date stated at the top of the document.
14. Contact Us
Questions, requests, or concerns regarding this Privacy Policy or the processing of personal data can be sent to:
Structure Hub Privacy Team
Email: privacy@structurehub.io