Privacy Policy
At ChemStruct, your proprietary chemical structures, formulas, and IUPAC datasets are treated with absolute confidentiality. We engineer our infrastructure around zero chemical data retention.
Our Core Promise: Zero Chemical Retention
ChemStruct never stores, trains AI models on, or indexes your converted molecular structures. Single conversions execute entirely in ephemeral system RAM and are discarded immediately after the HTTP response is completed.
Chemical Intellectual Property & Processing
When you submit SMILES, IUPAC names, InChI strings, CAS numbers, or batch molecular files through the ChemStruct Platform or API:
Parsing through RDKit and OPSIN engines happens in transient memory without disk persistence.
Bulk uploaded files are assigned cryptographically random UUIDs and auto-purged within 24 hours.
Your proprietary compound structures are never used to train or fine-tune algorithmic models.
You retain 100% intellectual property rights in all input molecules, outputs, and derivative computations.
Information We Collect & Telemetry
We collect minimal operational data necessary to secure and deliver reliable API services:
- Account Credentials: Email addresses and cryptographic password hashes (salted via bcrypt). Plaintext passwords are never stored.
- API Volume & Rate Limits: Request frequency, HTTP status codes, and latency metrics to enforce quota limits and protect against DDoS attacks. Chemical payloads are filtered out of error logs.
Encryption & Isolation Standards
TLS 1.3 in Transit
Enforced HTTPS across all endpoints & webhooks
AES-256 at Rest
Database volumes and API secrets encrypted at rest
Isolated Sandboxes
OPSIN and RDKit workers run in dedicated memory bounds
privacy@chemstruct.com
For custom Data Protection Agreements (DPAs) or compliance audit requests.