Draft · Not approved
Website privacy notice
A review draft for this marketing website, not an approved policy for the investment application.
Draft for review — not a legal assurance
Operator identity, hosting/provider details, contact arrangements, retention, and applicable privacy requirements still need review. Do not treat this draft as the app’s privacy policy or proof of compliance.
1. Scope and present website behavior
This website explains Struct Capital. It has no investment-document upload, investor login, holdings entry, or brokerage-account connection. Its code does not add analytics or marketing trackers.
The appearance choice stays in the current browser session’s application memory; this implementation does not save that preference in cookies or local storage. Hosting infrastructure may process request metadata, but actual providers, logs, and retention have not been verified here.
2. Contact information, when delivery is enabled
The optional contact form asks for a name, reply email, topic, message, and permission to reply. It is disabled until delivery is configured. Do not include financial records, identity documents, balances, or credentials.
When enabled, the website server validates the request and forwards those inquiry fields to the configured contact service. The website handler does not write the message to a local database or log its content. The receiving provider’s processing, access, and retention still need confirmation before enabling delivery.
Abuse checks use request origin, timing, a hidden anti-spam field, and a temporary server-side rate-limit counter derived from network information. Hosting and upstream systems may have their own logging behavior; this draft does not certify those systems.
3. Screenshots and the separate application
Public product images are selected exports of supplied captures, with email headers and dashboard balances excluded. Document issuer details do not imply affiliation.
The mobile application’s documents and account data follow a separate processing flow. This draft does not establish its encryption, storage, sharing, retention, deletion, or international-transfer practices.
4. Items requiring confirmation
- The responsible legal entity and an approved privacy-request contact.
- Hosting, delivery providers, processing locations, subprocessors, access controls, and logging.
- Purposes and applicable legal basis for each processing activity.
- Retention periods, deletion processes, applicable rights, and verified request procedures.
- Any required notices or safeguards before contact delivery, analytics, or additional processing is enabled.
5. Questions
The contact page shows whether inquiry delivery is available. No unverified email address, response deadline, or statutory procedure is presented as operational here.
A final reviewed notice must replace this draft before it is relied on as an approved public policy.