Privacy Policy

This policy explains what personal data BimOra collects when you use the BimOra website and the BimOra SDW plugin for Revit, why we collect it, and the choices you have.

1. Data we collect

Account data — name, email address, company name and password hash when you register. We use it to operate your account, licenses and support threads.

Licensing data — license key, a hashed device identifier, device name, activation and session timestamps, plugin version and IP address of API calls. We use it to enforce seat and device limits, detect abuse and provide the "one active session" guarantee.

Support & community content — tickets, comments and contact messages you submit are stored and, for support/community threads, publicly visible together with your display name.

Payment data — handled by our payment provider; BimOra does not store card numbers.

Website usage — see the Analytics & Telemetry Policy for details on analytics and plugin telemetry.

We do not access, upload or store your Revit models or project content.

2. Why we process it (legal bases)

• Contract — providing the Services you signed up for (account, licensing, support).
• Legitimate interest — securing the Services, preventing license fraud, improving the product.
• Consent — optional analytics and marketing emails, where required.
• Legal obligation — accounting and tax records.

3. Sharing

We do not sell personal data. We share it only with service providers needed to run the Services (hosting, email delivery, payment processing) under data-processing agreements, or when required by law.

4. Retention

Account data is kept while your account is active. Licensing records may be retained after account deletion as long as needed for fraud prevention, dispute resolution and legal compliance. Support threads may be anonymized instead of deleted to keep community answers useful.

5. Security

Passwords are stored hashed, license files are cryptographically signed, API access is token-based and rate-limited, and admin access is role-restricted. No system is 100% secure; report vulnerabilities via the Contact page.

6. Your rights

Depending on your location you may have the right to access, correct, export, restrict or delete your personal data, and to object to processing. Use My Account or the Contact page to exercise these rights. You may also complain to your local data-protection authority.

7. Cookies

The website uses strictly necessary cookies for sign-in (authentication and anti-forgery). We do not use third-party advertising cookies.

8. Children

The Services are for professionals and not directed at children under 16.

9. Changes

We will post changes here with a new "Last updated" date; material changes will be highlighted on the website.

10. Contact

Privacy questions and requests: Contact page.