StructureIQ
Privacy Policy

Last updated: 10 August 2026

This policy describes what StructureIQ actually collects and how it is actually used, based on the product as built. It has not been reviewed by a lawyer — have counsel review it before relying on it as a complete Digital Personal Data Protection Act, 2023 ("DPDP Act") compliance document.

1. Who we are

StructureIQ is an infrastructure finance and enterprise resource planning platform operated by Greenex Solutions Private Limited ("Greenex", "we", "us"), CIN U35105TS2026PTC209339, registered office in Hyderabad, Telangana, India. Greenex is the Data Fiduciary for personal data processed through StructureIQ under the DPDP Act.

2. Who this policy covers

StructureIQ is used by several kinds of people, each with different data collected about them:
  • Company owners and employees of businesses ("Customers") who use StructureIQ to run their accounting, HR, tendering, procurement, and CRM operations.
  • Clients, vendors, and lenders of our Customers, who may be invited to a limited portal (project data room, invoice payment link, quotation view) by a Customer.
  • Auditors invited by a Customer to view read-only financial statements.
  • Visitors to our public website who submit the contact form.

3. What personal data we collect

Account & identity data: name, email address, phone number, and password (stored hashed by our authentication provider, never in plain text) for anyone who signs in.

Employee (HRMS) data, entered by a Customer about their own staff: name, contact details, bank account details for salary payment, PAN, statutory identifiers (PF/ESI/UAN), attendance records, leave/payroll history, and employment documents.

Attendance verification data (where a Customer enables it): a selfie photo taken at check-in/check-out, and GPS location captured at check-in/check-out and, if separately enabled with the employee's explicit consent, at intervals during working hours only. Location tracking is opt-in per employee and can be withdrawn at any time from the mobile app.

Financial & business data: invoices, ledger entries, GST filings, bank statements uploaded for reconciliation, vendor and client records, and related documents a Customer enters to run their business through the platform.

Client/vendor/lender contact data: name, company, email, and phone, entered by a Customer for the counterparties they work with.

Usage data: login timestamps and an audit trail of actions taken in the platform, kept for accountability and troubleshooting.

We do not knowingly collect payment card numbers — bank transfers referenced in the platform are recorded as text (account number/IFSC/UTR) that a Customer or their counterparty enters, not processed by us as a payment processor.

4. Why we process this data

  • To provide the core functionality a Customer has signed up for — accounting, HR/payroll, tendering, procurement, CRM, and related modules.
  • To verify attendance where a Customer has enabled selfie/location capture, for their own workforce-management purposes.
  • To send transactional notifications (approval requests, payment reminders, invitation emails) related to actions taken in the platform.
  • To meet statutory obligations a Customer uses the platform for — GST return filing, e-Invoice/e-Way Bill generation, TDS computation, and ROC/MCA compliance records — which necessarily involves sharing relevant data with government systems via our filing partners (Section 6).
  • To maintain security and an audit trail of who did what.
We do not sell personal data to third parties, and we do not use Customer business data to train any AI model.

5. Legal basis

Personal data is processed on the basis of: (a) consent, given at account creation and, for location tracking specifically, given separately and explicitly before tracking begins; and (b) our Customers' own legitimate business purposes in operating their workforce and finances, for which they are themselves responsible as the party who entered the data. A Customer determines what data about their own employees, clients, and vendors is entered into the platform.

6. Who we share data with

We share data only as needed to provide the service:

  • Supabase — our database and file-storage infrastructure provider, hosting all platform data.
  • Resend — our transactional email provider, used to deliver approval requests, invitations, and payment notifications.
  • WhiteBooks — our GST Suvidha Provider, used when a Customer files GSTR-1/GSTR-3B returns or generates e-Invoices/e-Way Bills; the specific invoice/return data needed for that filing is transmitted to WhiteBooks and, through them, to the Government of India's GST Network as required by law.
  • Expo/EAS — our mobile app build and crash-reporting infrastructure for the StructureIQ mobile app.

We do not otherwise sell, rent, or share personal data with third parties for their own marketing purposes.

7. Data retention

We retain data for as long as a Customer's account is active, plus the period required by applicable Indian law (for example, financial records under the Companies Act and Income Tax Act, typically 7-8 years). If a Customer closes their account, we retain data only as long as legally required and then delete it, except backups which age out on our standard backup rotation.

8. Your rights under the DPDP Act

Subject to the Act, you have the right to: access a summary of personal data we hold about you and the processing activities; request correction or completion of inaccurate or incomplete data; request erasure of data that is no longer necessary for the purpose it was collected; and file a complaint with us and, if unresolved, with the Data Protection Board of India. To exercise these rights, contact us using the details in Section 11. If you are an employee of a Customer, you may also need to route certain requests through your employer, since they control what data is entered about you and, for location tracking specifically, whether it applies to your role (see Section 9).

9. Location and camera data specifically

Location and selfie capture in the StructureIQ mobile app exist solely for workforce attendance verification, and only run when a Customer has enabled the relevant setting for their company:
  • A selfie is captured only at the moment of check-in/check-out, uploaded directly to secure storage, and used only to verify who checked in.
  • Location at check-in/check-out is captured the same way.
  • Background location tracking during work hours applies only to roles a Customer specifically opts in (for example, site/field staff or field sales) — agreed as a condition of employment for that role at hiring, not requested separately inside the app. It still only ever runs while checked in, only within the configured work-hour window, and stops automatically at check-out; a visible in-app indicator shows whenever it's active.
  • We do not use location or selfie data for advertising, profiling, or any purpose beyond attendance verification and, where applicable, the safety/coordination purpose a Customer has configured it for.

10. Security

We apply role-based access control and row-level data isolation so that one Customer's data is not visible to another. Sensitive third-party credentials are encrypted at rest. The mobile app stores your session in your device's secure hardware-backed keystore (not plain storage), supports an app-level biometric lock, and signs you out automatically after a period of inactivity. No system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

11. Grievance Officer / contact us

Grievance Officer: Arun Kumar K
Email: info@greenxsolutions.in
Address: Greenex Solutions Private Limited, Hyderabad, Telangana, India

12. Children's data

StructureIQ is a business software platform and is not directed at, or knowingly used to collect data from, children.

13. Changes to this policy

We may update this policy as the platform changes. The "Last updated" date at the top will reflect the most recent revision. Material changes affecting how we handle your data will be communicated to Customers directly.
← Back to StructureIQ·Terms of Service