Privacy Policy

Product: STRUXTURE Publisher: CTRL Colab LLC Version: 1.0 Effective: September 22, 2026

STRUXTURE has no accounts, no telemetry, no analytics and no crash reporting. Your presets, your folder structures and your template files stay on your computer and are never transmitted anywhere. The only thing the app ever sends is a licence check — your serial, a non-reversible machine fingerprint, and the app version — and §3 sets out exactly what that is.

1. What this covers

This policy covers the STRUXTURE desktop application and the purchase and support process around it. It is written by CTRL Colab LLC, which makes STRUXTURE and is the data controller for the small amount of information described below.

The ctrlcolab.com website is covered by the CTRL Colab site privacy policy. Where this document and that one differ about the app, this one governs.

2. What stays on your computer

Everything you make. None of it is transmitted.

STRUXTURE is a local tool. The following live on your own disk, are never uploaded, and are never seen by us:

Your presets — the folder structures you design, saved as a single JSON file.
Your template library — an independent copy of each file you import (.psd, .aep, .c4d, .ai, .indd, plain text, anything else), stored alongside the presets.
The project folders you generate — written to the destination you pick, wherever that is.
Your licence activation — the signed confirmation returned by the activation in §3.

The app's own data lives in one folder:

Windows: %APPDATA%\com.ctrlcolab.struxture\
macOS: ~/Library/Application Support/com.ctrlcolab.struxture/

You can open, copy, back up or delete that folder yourself. Presets are plain JSON and the template library is ordinary files in ordinary folders — nothing there is in a proprietary format that requires STRUXTURE to read.

STRUXTURE reads and writes files only where you direct it: the folders you choose when importing a template, and the destination you choose when generating a project. It does not scan your disk, index your files, or look anywhere you have not pointed it.

3. The one thing the app sends

A licence check, to ctrlcolab.com, and nothing else.

This is the app's only outbound network connection. It happens twice in the life of an install: once when you activate, and then roughly monthly as a background re-check (see the EULA §5).

Each request contains exactly three things:

Your serial number — the one from your purchase email.
A machine hash — a salted, one-way SHA-256 hash derived from a hardware identifier. It is not reversible, it is specific to STRUXTURE, and it cannot be used to identify your computer to anyone else or matched against a hash from any other product.
The app version and operating-system name — for example 1.0.0 and windows, so we can tell which build is asking.

Equally important is what it does not contain, and we mean this literally rather than as a figure of speech. The request carries no file names, no file paths, no presets, no template files, no folder structures, no contents of anything on your disk, no user name, no computer name, and no IP-based location lookup. It is not possible for us to learn what you build with STRUXTURE, because the app never sends it.

Our server records the request in order to enforce the two-computer limit in the EULA §3 and to honour refunds. Against your serial we store the machine hash, the timestamp of the check, and the app version and OS name. Our hosting provider also keeps ordinary web server logs, which include the originating IP address; those are retained for a short period as a routine security measure and are not linked to your presets or your work, because we do not have them.

If the check cannot reach us, nothing happens and nothing is queued for later. Silence is never treated as a failure, and there is no retry storm — see the EULA §5.

4. What we deliberately do not do

Stated plainly, because "we respect your privacy" is worth nothing without specifics. STRUXTURE has:

No accounts. There is nothing to sign up for and no password to lose. A serial number is not an account.
No telemetry or analytics. No usage statistics, no feature counters, no session tracking, no "anonymous diagnostics" — not on, not off, not present.
No crash reporting. If STRUXTURE crashes, we do not find out unless you tell us.
No advertising, no advertising identifiers, and no third-party SDKs of any kind in the app.
No profiling and no automated decision-making that produces legal or similarly significant effects.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in the California Consumer Privacy Act. We never have and there is no mechanism in the product by which we could.

5. When you buy

Paddle takes the payment. We never see your card.

Paddle.com Market Limited is our merchant of record and handles the entire checkout. Your card details go to Paddle and never reach us — we have no access to them at any point. Paddle is an independent controller for the payment data it collects; see the Paddle privacy policy.

What we receive from Paddle, and store, is the minimum needed to issue and support your licence: your email address, the name you typed on the buy page if you typed one, and the transaction reference. These are held against your serial for as long as the licence exists, because that record is the licence — it is what lets us reissue a lost serial, free a seat when your laptop dies, and process a refund.

Your licence email is sent through Resend, our email provider, which processes your address on our behalf in order to deliver it.

Our licence database is hosted on Supabase, and the website and its API on Vercel; both act as processors on our behalf. All three providers, and Paddle, operate internationally, so your information may be processed in the United States and elsewhere under appropriate safeguards such as the EU Standard Contractual Clauses.

6. When you email us

If you write to hello@ctrlcolab.com, we keep the correspondence so we can help you and remember the context next time. We use it for that and nothing else. If you attach a preset or a screenshot to explain a problem, we look at it to answer your question and we do not retain it beyond the conversation.

7. Legal bases (UK/EU)

Where the UK GDPR or EU GDPR applies, our legal bases are:

Performance of a contract — issuing your licence, emailing your serial, and running the activation and licence check that make the licence work.
Legitimate interests — enforcing the seat limit you agreed to, preventing licence abuse, keeping short-lived server logs for security, and answering your support email.
Legal obligation — tax and accounting records relating to your purchase, which Paddle holds as merchant of record.

We do not rely on consent for anything in the app, because there is no optional data collection to consent to.

8. How long we keep things

Licence record (email, transaction reference, serial, machine hashes, check timestamps) — for the life of the licence. A perpetual licence means we keep it indefinitely, so that a serial issued today can still be reissued to you in five years.
Revoked licences — retained after revocation, because a refunded serial has to stay refusable. Reduced to the serial and its status.
Web server logs — a short period, as a routine security measure.
Support email — kept while it is useful for supporting you; deleted on request.

9. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, object to or restrict its processing, receive a portable copy, or withdraw consent where we rely on it. California residents additionally have the rights to know, delete, correct, and opt out of sale or sharing — noting that, as stated in §4, we do not sell or share personal information.

We will not discriminate against you for exercising any of these rights.

To exercise any of them, email hello@ctrlcolab.com. We will respond within the time the applicable law allows, and typically much sooner. One honest caveat: deleting your licence record deletes the licence — we would no longer be able to reissue your serial or free a seat for you. We will say so before acting, not after.

If you are in the UK or EU and you are unhappy with our response, you have the right to complain to your local supervisory authority.

10. Children

STRUXTURE is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, email us and we will delete it.

11. Changes to this policy

If we change this policy, the version number and effective date in the header above change with it. A change that materially affects what the app sends will be described in the release notes of the version that introduces it, not made quietly — if a future release ever added a network feature, it would be announced, documented here, and true of the build before it shipped.

12. Contact

Questions about this policy, or about any information we hold:

hello@ctrlcolab.com

STRUXTURE is made by CTRL Colab LLC. For legal service or postal correspondence, please contact us by email at the address above and we will provide a physical address on request.