Privacy Policy

Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany (info@nubri.co) is the controller for the data processed by Structurize API (structurizeapi.site). For the content of files you send for extraction, you decide what is processed; where those files contain personal data of others, we process it on your behalf and only to perform the extraction you request.

Account: your email address and a hashed password; whether and when you confirmed your email. Needed to run your account (Art. 6(1)(b) GDPR).

Files and schemas you send to the API: processed in memory to extract the data you asked for, then discarded. We do not store files, schemas or extracted results.

Usage log: for each extraction the request ID, time, file type, token count, cost and outcome, so you can see your usage and we can bill and prevent abuse (Art. 6(1)(b) and (f)).

API keys: stored only as a one-way hash; the key itself is shown once.

Free credits: to give the 10 free credits only once per mailbox, we keep a one-way hash of your email address even after you delete your account (Art. 6(1)(f)).

Payments: Stripe processes your payment; we receive the payment status, not your card details.

Abuse limits: sign-up and sign-in attempts are counted per IP address for up to 24 hours.

• Amazon Web Services (servers, email delivery, and the AI model: Anthropic Claude on Amazon Bedrock, which does not store your files or use them for training).
• Stripe (payments).

Transfers to the USA are based on the EU–US Data Privacy Framework where the provider is certified, otherwise on the EU Standard Contractual Clauses.

Account, keys and usage log: until you delete your account (dashboard → Billing → Delete account), which removes them at once. Payment records: as tax law requires (up to 10 years). The free-credit email hash: kept to prevent repeat trials.

We set no cookies. Your sign-in token is kept in your browser's local storage for 7 days.

Our web server records the IP address, time, requested URL, response status and browser type of each request to keep the service secure and working (Art. 6(1)(f) GDPR). These logs are deleted after at most 8 days.

You have the right to access, rectification, erasure, restriction, data portability and to object. Email info@nubri.co. You may also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.