Privacy policy

Last updated: 1st February 2026

This Privacy Policy explains how Structurizr Limited (“we”, “us”, or “our”) collects, uses, stores, and protects personal data in connection with the purchase and licensing of Structurizr server (“Application”). Please read this Privacy Policy carefully.

Structurizr Limited is the data controller in respect of the personal data described in this Privacy Policy. We are committed to protecting your personal data and complying with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, and the Data Protection (Jersey) Law 2018, as applicable.

If you have any questions about this Privacy Policy or the way we handle your personal data, please contact us using the details provided in the “Contact Information” section below.

Scope of this Privacy Policy

This Privacy Policy applies solely to personal data collected by Structurizr Limited in connection with the purchase of a server license and the delivery of license keys for the Application.

This Privacy Policy does not apply to any data that you or your organisation create, store, or process within the Application once it has been installed on your own infrastructure. Structurizr Limited has no access to, and accepts no responsibility for, any such data. You are solely responsible as data controller for any personal data held within your installation of the Application and for ensuring that your use of the Application complies with all applicable data protection legislation, including the GDPR.

Personal Data We Collect

We collect only the personal data that is necessary for the purposes set out in this Privacy Policy. The personal data we collect in connection with the purchase of a server license is as follows:

Name and email address: collected for the purposes of correspondence relating to your license purchase and for delivery of your application license key.

We do not collect any special categories of personal data (as defined under the GDPR) and we do not collect personal data from individuals under the age of 18.

How We Use Your Personal Data

We use the personal data we collect for the following purposes:

to process your license purchase and generate your application license key;
to issue invoices and maintain accurate financial records in connection with your purchase;
to deliver your application license key to the email address you have provided;
to correspond with you in connection with your license, including in respect of renewals, updates to this Agreement, or any queries you raise with us; and
to comply with our legal and regulatory obligations.

Legal Basis for Processing

We process your personal data on the following legal bases under applicable data protection legislation:

Performance of a contract: the processing of your name and email address is necessary for the performance of the license agreement between you and Structurizr Limited, including the issuing of invoices and the delivery of license keys.
Legitimate interests: we may process your email address to correspond with you in connection with your existing license, where this is necessary for our legitimate interests in administering and supporting our licensing activities and does not override your rights and interests.
Legal obligation: we may process your personal data where necessary to comply with our legal and regulatory obligations, including our obligations under applicable tax and accounting legislation.

Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law.

Personal data collected in connection with a license purchase will be retained for the duration of your license and for a period of ten (10) years following the expiry or termination of your license, in order to comply with our obligations under applicable tax and accounting legislation. After this period, your personal data will be securely deleted or anonymised.

We do not sell, rent, or otherwise disclose your personal data to third parties for their own marketing or commercial purposes.

We may share your personal data with the following categories of third parties, strictly to the extent necessary to fulfil the purposes described in this Privacy Policy:

Payment processors: to process payments made in connection with your license purchase. Any such processor acts as a data processor on our behalf and is contractually required to process your data only in accordance with our instructions and applicable data protection law.
Legal and regulatory authorities: where we are required to disclose your personal data by applicable law, regulation, or court order.

Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. However, please be aware that the transmission of data over the internet is not completely secure and we cannot guarantee the security of data transmitted to us electronically. Any such transmission is at your own risk.

Your Rights

Subject to applicable data protection legislation, you have the following rights in respect of your personal data:

Right of access: you have the right to request a copy of the personal data we hold about you.
Right to rectification: you have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: you have the right to request that we delete your personal data, subject to our legal obligations to retain certain records.
Right to restriction: you have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: you have the right to request that we provide your personal data to you in a structured, commonly used, and machine-readable format.
Right to object: you have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis for processing.

To exercise any of these rights, please contact us using the details provided in the “Contact Information” section below. We will respond to your request within thirty (30) days. We may ask you to verify your identity before we are able to fulfil your request.

If you are not satisfied with the way in which we handle your personal data or respond to your request, you have the right to lodge a complaint with the relevant supervisory authority. In Jersey, the relevant authority is the Office of the Information Commissioner.

Third-Party Services

Our website or the license purchasing process may contain links to or integrations with third-party websites or services. This Privacy Policy does not apply to those third-party services and we are not responsible for the privacy practices of any third party. We encourage you to read the privacy policies of any third-party services you access.

Amendments to this Privacy Policy

Structurizr Limited reserves the right, at its sole discretion, to modify or replace this Privacy Policy at any time to reflect changes in the law, our data processing activities, or our business practices. If a revision is material, Structurizr Limited will provide at least 30 days notice prior to any new terms taking effect by email to the address associated with your license or by a prominent notice on our website. What constitutes a material change will be determined at Structurizr Limited’s sole and reasonable discretion.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about the way in which we are handling your personal data, please contact us by email at hello@structurizr.com.

Structurizr Limited is registered with the Office of the Information Commissioner, Jersey, Channel Islands under the Data Protection Register. Our registration number with the Jersey Office of the Information Commissioner is 62007.

Entire Agreement

This Privacy Policy is incorporated into and forms part of the Structurizr server End-User License Agreement (EULA) between you and Structurizr Limited. In the event of any conflict between this Privacy Policy and the End-User License Agreement, this Privacy Policy shall prevail in respect of the processing of personal data.