Contents
- Who we are and how to reach us
- Two kinds of information: ours and our customers'
- Information we collect
- How we use information
- SMS / text messaging
- How we share information
- Payment information
- Data security
- Data retention
- Cookies and analytics
- Your choices and rights
- Children's privacy
- Changes to this policy
1. Who we are and how to reach us
Structure Studio Suite is a software platform for shed, barn, and post-frame building companies. It provides building design and quoting tools, customer and lead records, and related business features. Structure Studio Suite is operated by CSM Capital LLC, doing business as CSM Synergy.
Mailing address: 1645 Bethany Rd, Cottage Grove, TN 38224
Email: support@csmsynergy.com
Phone: 816-300-5600
Website: structurestudiosuite.com
2. Two kinds of information: ours and our customers'
Structure Studio Suite serves businesses. That means there are two different relationships to keep straight, because our responsibilities differ in each:
- Information about our own customers. When a building company subscribes to Structure Studio Suite, we collect and control information about that business and its users — the account owner's name and email, billing details, and how the account is used. This policy governs that information.
- Information a customer's own customers provide. When a shed shopper designs a building or requests a quote through one of our customers' branded links, that information belongs to and is controlled by that building company, not by us. We process it on their behalf and under their instructions, as a service provider. If you are a shed shopper and want your information accessed, corrected, or deleted, contact the building company you were working with. We will support any such request they pass to us.
3. Information we collect
From the businesses who subscribe to Structure Studio Suite
- Business name, mailing address, phone number, website, and logo
- Account user names, email addresses, and phone numbers
- Login credentials (passwords are stored only as cryptographic hashes — we never see or store your actual password)
- Billing contact details and subscription history
- Product, pricing, and catalog information you enter
- Usage information such as pages visited, features used, and log data (IP address, browser type, timestamps)
From visitors to this website
- Information you submit when booking a demo — typically name, email address, phone number, and any details you choose to include
- Standard analytics and server log data
Processed on behalf of our customers
- End-customer contact details (name, phone number, email address, and where provided, project address) submitted through a building company's design and quote tools
- Building designs, selections, quotes, and estimates
4. How we use information
We use information to:
- Provide, operate, maintain, and improve the Structure Studio Suite platform
- Create and administer accounts, and authenticate users
- Process subscription payments and send billing notices, receipts, and renewal reminders
- Respond to inquiries, provide support, and schedule and conduct demos
- Send service and account communications, including the text messages you have consented to receive
- Detect, investigate, and prevent fraud, abuse, and security incidents
- Comply with legal, tax, and accounting obligations
We do not sell personal information. We do not use information we process on behalf of our customers for our own marketing.
5. SMS / text messaging
Structure Studio Suite may send text messages to the businesses who subscribe to our platform — for example, account notifications, support responses, billing and payment notices, and service updates — to a phone number provided with consent. Consent to receive text messages is never a condition of purchasing anything from us.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
No mobile information will be shared with third parties or affiliates for marketing/promotional purposes.
Text messaging originator opt-in data and consent will not be shared with any third parties, except for aggregators and providers of the Text Message services.
We only send the categories of messages you consented to, and you can opt out at any time by replying STOP. Full details, including how to opt out and rejoin, are in our SMS Terms of Service.
6. How we share information
We do not sell, rent, or trade personal information, and we do not share it with affiliates or outside parties for their own marketing purposes.
We use a small number of service providers to run the platform, and they may process information only as needed to perform their function for us and only under contractual confidentiality and security obligations. These functions are:
| Function | Purpose |
|---|---|
| Cloud hosting and database | Running the platform and storing your data |
| Payment gateway | Processing subscription payments and storing payment credentials |
| Email and messaging delivery | Sending estimates, notifications, and text messages |
| Customer relationship platform | Syncing leads and estimates as directed by our customers |
| Scheduling | Booking demo calls |
We may also disclose information if required by law, subpoena, or other legal process; to protect our rights, safety, or property, or that of others; or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor the commitments in this policy.
All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.
7. Payment information
We do not see or store full payment card numbers. When you enter card details to subscribe, those details are captured directly by our payment gateway through its own secure fields and exchanged for a token. We store only that token and non-sensitive descriptive details, such as the card brand and last four digits, along with the amount, date, and status of each transaction.
Our payment gateway maintains its own privacy and security practices, including compliance with the Payment Card Industry Data Security Standard (PCI DSS), and processes payment card information as an independent party for that purpose.
We intend to offer, in a future release, the ability for our customers to accept payments from their own customers through the platform. That feature is not available today, and no such payments are being processed. When it launches, this Privacy Policy and our Terms of Service will be updated in advance to describe how those payments are handled, what information is collected, who holds the funds, and what each party is responsible for.
8. Data security
We use reasonable administrative, technical, and organizational safeguards designed to protect information, including encryption in transit (HTTPS/TLS), encryption at rest for our databases, hashed passwords, role-based access controls, per-account data isolation enforced at the database level, and restricted administrative access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If we become aware of a breach of security affecting your personal information, we will notify affected parties and applicable authorities as required by law.
9. Data retention
We retain account and customer data for as long as an account is active, and afterward for as long as needed to comply with legal, tax, accounting, and dispute-resolution obligations. On written request following account closure, we will delete or return account data, except where we are required to retain it by law. Backup copies are removed on our normal backup expiration cycle.
10. Cookies and analytics
This website and the platform use cookies and similar technologies that are necessary for the service to function — for example, keeping you signed in and remembering session state. We may also use privacy-respecting analytics to understand aggregate traffic and improve the product. You can control cookies through your browser settings, though disabling them may prevent the platform from working correctly.
We do not use advertising-network tracking cookies on this website.
11. Your choices and rights
- Text messages: reply STOP to any message to opt out at any time; reply HELP for assistance.
- Email: use the unsubscribe link in marketing email. Service, billing, and security notices are part of your account and cannot be unsubscribed while the account is active.
- Access, correction, and deletion: account owners can view and edit much of their information directly in the portal, and may contact us at support@csmsynergy.com to request access to, correction of, or deletion of personal information we hold about them.
- Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or similar state privacy laws — including rights to know, delete, correct, and to not be discriminated against for exercising them. We do not sell personal information or share it for cross-context behavioral advertising. To exercise any right, contact us at the address above; we will verify your request and respond within the time required by law.
- Shed shoppers and other end customers: please direct requests to the building company you worked with, as described in section 2.
12. Children's privacy
Structure Studio Suite is a business tool and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. For material changes, we will provide notice through the platform or by email before the change takes effect. Continued use of the platform after a change takes effect constitutes acceptance of the updated policy.