Privacy.

1Who controls your data.

Velocity is the data controller. Our single contact channel is strux@calyvent.com. We do not operate a phone line. We do not have a Data Protection Officer. We are a small studio.

2What we collect.

Strux is 100% free. We collect: standard request logs at the Cloudflare edge (IP address, user-agent, request path, timestamp), retained by Cloudflare on its standard rolling window. We do not access these logs except to investigate abuse. We do not collect email addresses, payment information, or any account data.

3What we never collect.

• The files you parse.
• The text you paste.
• The output you generate.
• Any field, value, schema, identifier, or row that passes through the workspace.
• Browsing analytics, click-paths, scroll-depth, session-replay, mouse-movement, or heat-maps.
• Marketing pixels, advertising identifiers, third-party trackers.
• Email addresses, account credentials, or payment information.

We have no telemetry pipeline. We have no analytics tool. We have no error-tracking service that ships payloads. The only network calls Strux makes during conversion are loading the page itself.

4Why we collect it.

The minimum data we collect is collected to: (a) detect and prevent abuse; (b) comply with applicable law.

5Legal bases (GDPR / UK GDPR).

• Legitimate interests — to prevent fraud and abuse on our infrastructure.

6Sub-processors.

• Cloudflare, Inc. — hosting, edge delivery, DNS, DDoS protection. United States.

Each sub-processor has its own privacy notice governing its use of your data. We have no other sub-processors.

7International transfers.

Velocity operates from the United States. Our sub-processors are headquartered in the United States. If you are in the EEA, the United Kingdom, or Switzerland, your data is transferred to the United States, which has not been the subject of an adequacy decision applicable to all transfers. We rely on the Standard Contractual Clauses approved by the European Commission with each sub-processor where applicable.

8Retention.

• Cloudflare edge logs — Cloudflare's standard rolling window (typically 7 days), outside our control.
• Email correspondence with us — kept for as long as needed to resolve the issue, then deleted within twenty-four months.

9Your rights.

Since we do not collect personal data beyond edge logs, there is no personal data to access, correct, or delete. California residents: you have the rights described in the CCPA/CPRA. We do not sell your data and we do not share it for cross-context behavioural advertising.

10Children.

Strux is not intended for anyone under eighteen. We do not knowingly collect data from minors.

11Security.

We use TLS for all transport. No system is perfectly secure; you accept this when you use Strux.

12Cookies and local storage.

Strux uses your browser's local storage to remember your last-used input. We do not set advertising cookies, marketing cookies, or analytics cookies.

13Do Not Track.

We do not track you, so DNT signals are not relevant. We honour them anyway.

14Breach notification.

Because we do not store personal data or conversion data, a breach of our infrastructure cannot expose it.

15Changes.

We may update this notice. The current version is always at this URL with an effective date at the top.

16Contact.

All privacy correspondence: strux@calyvent.com. Subject line privacy reaches the right inbox.

last set · may twenty-fourth · two thousand twenty-six