Privacy Policy
This Privacy Notice explains how Xcorre Private Limited ("we," "us," "our"), operating CorStruct, accesses, collects, stores, uses, and shares personal information when you use our services — including our website at corstruct.app and the CorStruct application. Questions or concerns can be sent to xcorre.team@gmail.com. If you do not agree with this notice, please don't use our services.
§ Summary
01What information do we collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide when you register for CorStruct, express interest in our products or services, participate in activities on the platform, or otherwise contact us.
Personal information provided by you. Depending on how you interact with CorStruct, this may include:
- Names
- Phone numbers
- Email addresses
- Mailing addresses
- Job titles
- Usernames
- Passwords
- Contact or authentication data
- Billing addresses
- Debit/credit card numbers
- Contact preferences
Sensitive information. When necessary, with your consent or as otherwise permitted by applicable law, we process:
- Financial data
All personal information you provide to us must be true, complete, and accurate — please let us know of any changes.
Google API
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Information collected from other sources
To enhance our ability to provide relevant offers and services and to keep our records up to date, we may obtain information about you from public databases, joint marketing partners, affiliate programs, data providers, and other third parties. This can include mailing addresses, job titles, email addresses, phone numbers, behavioral data, IP addresses, and social media profile information, used for targeted marketing and event promotion.
02How do we process your information?
We process your personal information for reasons including:
- Account creation and authentication — so you can create and log in to your account and keep it in working order.
- Delivering the service — to provide you with the CorStruct features you request.
- Protecting vital interests — when necessary to prevent harm to an individual.
03What legal bases do we rely on to process your information?
If you are located in the EU or UK, this section applies to you. The GDPR and UK GDPR require us to explain the legal bases we rely on:
- Consent. Where you've given us permission to use your information for a specific purpose. You can withdraw consent at any time — see Withdrawing your consent.
- Performance of a contract. Where processing is necessary to fulfill our obligations to you, including providing CorStruct.
- Legal obligations. Where necessary to comply with the law, cooperate with regulators, or exercise or defend our legal rights.
- Vital interests. Where necessary to protect your vital interests or those of a third party.
If you are located in Canada, this section applies to you. We may process your information with your express or implied consent, which you may withdraw at any time. In limited, legally defined cases we may process information without consent — for example, for fraud detection and prevention, in connection with a business transaction, to assess an insurance claim, to identify and contact next of kin, to investigate a suspected breach of an agreement or law, where information was produced in the course of employment or a profession consistent with its original purpose, for journalistic or artistic purposes, where information is already publicly available, for approved research subject to ethics oversight, or where disclosure is compelled by a subpoena, warrant, or court order.
04When and with whom do we share your personal information?
We may need to share your personal information in the following situation:
- Business transfers. In connection with, or during negotiations of, a merger, sale of company assets, financing, or acquisition of all or part of our business.
05Do we offer artificial intelligence-based products?
Use of AI technologies
We provide AI-powered features through third-party AI service providers, including OpenAI. Your input, output, and related personal information are shared with and processed by these providers to enable the AI features described in this notice — see Legal bases. You must not use CorStruct's AI features in a way that violates the terms or policies of any AI service provider.
Our AI products
CorStruct's AI features are designed to power the core AI applications of the platform — including meeting transcription, action-item extraction, deadline and permit flagging, and drafting follow-ups for your review.
How we process your data using AI
Personal information processed through our AI features is handled in line with this Privacy Notice and our agreements with our AI service providers, to keep your information secure throughout the process.
How to opt out
You can manage how your data is used by AI features at any time by logging in to your account settings and updating your preferences there.
06How long do we keep your information?
We will only keep your personal information for as long as necessary for the purposes set out in this notice, unless a longer retention period is required by law (such as tax or accounting requirements). No purpose in this notice requires us to keep your personal information for longer than six (6) months past the termination of your account.
Once we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, where that isn't possible (for example, because it's held in backup archives), securely isolate it from further processing until deletion is possible.
07How do we keep your information safe?
We've implemented technical and organizational security measures designed to protect any personal information we process. That said, no method of transmission over the internet or electronic storage is 100% secure, so we can't guarantee that unauthorized third parties will never defeat our safeguards. Transmission of personal information to and from CorStruct is at your own risk — please only access the service within a secure environment.
08Do we collect information from minors?
We do not knowingly collect, solicit, or sell personal information from anyone under 18 (or the equivalent minimum age in your jurisdiction). By using CorStruct, you confirm you're at least 18, or that you're a parent or guardian consenting on behalf of a minor dependent. If we learn we've collected data from someone under 18, we will deactivate the account and take reasonable steps to promptly delete that data. If you believe we may have collected information from a minor, contact us at xcorre.team@gmail.com.
09What are your privacy rights?
In regions including the EEA, UK, Switzerland, and Canada, applicable law may give you the right to: access and obtain a copy of your personal information; request rectification or erasure; restrict processing; request data portability; and object to certain processing, including automated decision-making. If a decision producing legal or similarly significant effects is made solely by automated means, we'll inform you, explain the main factors, and offer a simple way to request human review.
We will consider and act on any request in line with applicable data protection law.
If you're in the UK and unhappy with how we've handled your information, you can complain directly to us, in addition to your rights under the UK GDPR and Data Protection Act 2018.
What happens after you complain: we'll acknowledge it within 30 days, investigate without unjustified delay, and keep you informed of progress and the outcome. If you're unhappy with our final response, you can refer your complaint to the Information Commissioner's Office (ICO), the UK's supervisory authority — ico.org.uk/make-a-complaint, helpline 0303 123 1113, or by post to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
If you're in the EEA or UK and believe we're unlawfully processing your information, you may also complain to your Member State data protection authority or the UK data protection authority. If you're in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent
Where we rely on your consent to process your personal information, you have the right to withdraw it at any time by contacting us — see Contact us. Withdrawing consent won't affect the lawfulness of processing carried out before the withdrawal, nor will it affect processing we carry out on a lawful basis other than consent.
Account information
To review, change, or terminate your account at any time, log in to your account settings and update your details there. When you request account termination, we'll deactivate or delete your account and information from our active databases — though we may retain some information to prevent fraud, troubleshoot issues, assist investigations, enforce our legal terms, or meet legal requirements.
Questions about your privacy rights can be sent to xcorre.team@gmail.com.
10Controls for Do-Not-Track features
Most browsers and some mobile platforms include a Do-Not-Track ("DNT") setting. Because no uniform technical standard for recognizing and honoring DNT signals has been finalized, we don't currently respond to DNT browser signals. If a standard is adopted that we must follow, we'll update this notice accordingly. California law requires we disclose this; because no industry or legal standard exists yet, we don't respond to DNT signals at this time.
Global Privacy Control: we recognize and honor Global Privacy Control (GPC) signals. If you use a browser or extension that supports GPC, we'll treat it as a valid opt-out request for the sale or sharing of your personal information for targeted advertising under applicable state privacy laws, including the CCPA — automatically, without requiring further action from you. Learn more at globalprivacycontrol.org.
11Do United States residents have specific privacy rights?
Categories of personal information we collect
The table below reflects categories of personal information collected in the past twelve (12) months. For a full inventory, see What information do we collect?
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, alias, postal address, phone number, unique or online identifier, IP address, email address, account name | No |
| B. California Customer Records personal information | Name, contact information, education, employment history, financial information | No |
| C. Protected classification characteristics | Gender, age, date of birth, race and ethnicity, national origin, marital status, other demographic data | No |
| D. Commercial information | Transaction information, purchase history, financial details, payment information | No |
| E. Biometric information | Fingerprints and voiceprints | No |
| F. Internet or network activity | Browsing history, search history, interactions with our and other websites, apps, and advertisements | No |
| G. Geolocation data | Device location | No |
| H. Audio, electronic, sensory, or similar information | Images and audio, video, or call recordings created in connection with our business activities | No |
| I. Professional or employment information | Business contact details, job title, work history, professional qualifications (e.g. if you apply for a job with us) | No |
| J. Education information | Student records and directory information | No |
| K. Inferences from collected information | Inferences drawn to build a profile reflecting preferences and characteristics | Yes |
| L. Sensitive personal information | Account login information; financial information including account access details; contents of email or text messages | Yes |
We only collect sensitive personal information as permitted by applicable law or with your consent, and we don't collect or process it for the purpose of inferring characteristics about you. We may also collect personal information outside these categories when you contact customer support, participate in surveys or contests, or otherwise interact with us to receive our services.
We retain: Category K information for as long as you hold an account with us; Category L information for as long as you hold an account with us.
How we use and share personal information
See How do we process your information? for how we use it, and When and with whom do we share your information? for how we disclose it to service providers under written contract. We may use your information for our own purposes, such as internal research for technological development — this isn't considered "selling" your information.
We have not disclosed, sold, or shared any personal information with third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not sell or share the personal information of our website visitors, users, or other consumers.
Your rights
Under certain US state privacy laws, subject to legal limits, you have the right to:
- Know whether we're processing your personal data
- Access your personal data
- Correct inaccuracies in your personal data
- Request deletion of your personal data
- Obtain a copy of the personal data you previously shared with us
- Non-discrimination for exercising your rights
- Opt out of processing used for targeted advertising, the sale of personal data, or certain profiling
Depending on your state, you may also have the right to: access the categories of data we process; obtain a list of categories, or specific third parties, we've disclosed data to; obtain a list of third parties to which we've sold data; review, question, and correct how your data has been profiled; limit the use of sensitive personal data; and opt out of sensitive-data collection via voice or facial recognition, where applicable.
How to exercise your rights
To exercise these rights, email us at xcorre.team@gmail.com or use the contact details in Contact us below. We will honor opt-out preferences signaled through Global Privacy Control. You may designate an authorized agent to submit a request on your behalf; we may require proof of that authorization before acting on it.
Request verification
When we receive your request, we'll need to verify your identity against the information already in our system. If we can't verify you from that information alone, we may ask for additional details for identity verification, security, or fraud-prevention purposes. Requests submitted through an authorized agent may require additional verification, including written and signed permission from you.
Appeals
If we decline to act on your request, you may appeal by emailing xcorre.team@gmail.com. We'll notify you in writing of the outcome, including our reasoning. If your appeal is denied, you may submit a complaint to your state attorney general.
12Do other regions have specific privacy rights?
Australia and New Zealand
We collect and process your personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. This notice satisfies both Acts' notice requirements, including what we collect, from which sources, for which purposes, and who else receives it.
Declining to provide certain personal information may limit our ability to offer the products or services you want, respond to your requests, manage your account, or confirm your identity and protect your account.
You may request access to or correction of your personal information at any time — see Review, update, or delete your data. If you believe we're processing your information unlawfully, you can complain to the Office of the Australian Information Commissioner or the Office of New Zealand Privacy Commissioner.
Republic of South Africa
You may request access to or correction of your personal information at any time — see Review, update, or delete your data. If unsatisfied with our response, you may contact the Information Regulator:
13Do we make updates to this notice?
We may update this Privacy Notice from time to time. The updated version will show a revised "Last updated" date at the top of this page. If we make material changes, we'll notify you by prominently posting a notice or sending you a direct notification. We encourage you to review this notice periodically.
14How can you contact us about this notice?
Questions or comments about this notice can be sent to us as follows:
15How can you review, update, or delete the data we collect from you?
Depending on the laws of your country or US state of residence, you may have the right to request access to the personal information we collect from you, details on how we've processed it, correction of inaccuracies, deletion of your data, or withdrawal of your consent to processing. These rights may be limited in some circumstances by applicable law.
To make a request, email xcorre.team@gmail.com with the details of what you'd like us to do, and we'll follow up to verify your identity and process your request.