Last updated: August 23, 2026
This policy describes what data the BIMS plugin collects, how we use it, and what rights you
have over it. BIMS collects the minimum data essential for the operation of the licensing
system and, in addition, a few minimal technical events that let us detect failures and know
which features are used. We never collect your BIM model or any content from your
work.
1. Information We Collect
a) Your account data
- Email address and password: To create and manage your account. Your password
never reaches our servers in clear text: it is handled by Firebase Authentication with secure
hashing.
- Name and company: As provided by you at sign-up (company is optional).
b) License and activation data
- Hardware ID: A unique, non-reversible identifier (SHA-256 hash) computed from
your Windows installation identifier, your system volume serial number and your processor
count. It is used to control the number of activations of your license.
- Computer name and Windows user name: Stored alongside each activation so that
you can recognise your own machines in the license panel and so support can help you release
an activation.
- License type and status, sign-up, expiry and last-validation dates, and validation
count.
- Installed BIMS version: To manage updates and provide support.
c) Free-trial specific data
- Country and language: Inferred from your connection, so we can send your trial
emails in your language.
- Fingerprint of your IP address: We store a hash of your IP, never the
address in clear text, solely to limit abuse (preventing automated mass sign-ups).
- Email domain check: When you sign up we check whether your address belongs to a
temporary or disposable email service. It is an automated check on the domain — not on you, and
not on the contents of your mail — and it keeps the free trial available to those who genuinely
intend to evaluate the product.
- Record of machines that have already started a trial: We store a hash of
your machine identifier together with the accounts that have started a trial on it, for the sole
purpose of granting one free trial per machine. This record contains neither your email
nor any content from your projects, and does not apply to paid licenses. You can ask us
to release a machine by writing to
soporte@bimsaddin.com — for example, if you share a
computer in an office, on a site or in a university lab.
- Advertising click identifier (gclid): Only if you reached our website from a
Google ad. It lets us know which ads generate real trials.
d) Plugin usage and diagnostic data
So that we can know which features are used and learn about failures happening on your machine —
which we would otherwise never find out about — the plugin sends minimal events. Each event
contains only an identifier for your account, the BIMS version, the date and a short label
chosen by us in the code:
- Feature used: The name of the button you ran, and which
BIMS_
parameters BIMS has left in the open model (the same ones you already see in the properties of
the elements BIMS generates).
- Failures: The error type (for example InvalidOperation) and
the label of the operation in progress. The public Autodesk identifier of Revit warnings.
- Connection problems: When sign-in fails due to the network, a code summarising
the likely cause (for example, that a corporate proxy requires authentication) and which of our
three servers responded. This is how we detect company networks that block BIMS.
What never leaves your machine. We do not collect your BIM model, Revit project
files, geometry, or any content of your work. Nor do we send the error message or its
technical stack trace — because these typically carry file paths, project names and element
names from your models — nor your IP address in clear text, nor your corporate proxy address.
The full detail of any failure stays in the local log on your machine, and is shared only if
you choose to send it to us.
2. How We Collect Information
- Directly from you when you create an account or request the free trial.
- Automatically, when the plugin connects to our servers to validate your license as you run
a feature.
- Automatically, in the background, when the plugin sends one of the usage or diagnostic events
described in point 1.d.
All of that communication travels encrypted (HTTPS/TLS) to bimsaddin.com and to
Firebase (Google LLC) services. When your company network blocks Google's servers,
the plugin automatically retries through our own server at bimsaddin.com, which
forwards the request without storing your credentials.
3. Use of Information
We use your data solely to:
- Validate and manage software licenses.
- Prevent unauthorized use of the plugin and abuse of free-trial sign-up.
- Distribute automatic software updates.
- Detect and fix failures in the plugin, and detect corporate networks that
prevent it from working.
- Know which features are used, so we can decide with data what to improve and
what to include in the free trial.
- Send you the free-trial emails and provide technical support when you request it.
- Measure the effectiveness of our advertising, when you arrived from an ad.
- Notify you of important changes to the service or the privacy policy.
Legal basis. Processing of account and license data is necessary to perform the
software usage contract. Processing of usage and diagnostic data relies on our legitimate interest
in keeping the product working and secure — an interest we have balanced by limiting that data to
the minimum described in point 1.d. You may object to this latter processing at any time
(points 7 and 8).
4. Sharing Information with Third Parties
We do not sell or trade your data. We rely on the following providers, which process it solely on
our behalf and for the purposes indicated:
-
Firebase (Google LLC): User authentication and storage of license data and
usage events. SOC 2 and ISO 27001 certified.
-
Netlify (Netlify Inc.): Hosting of bimsaddin.com and of the functions serving
trial sign-up, license validation and event intake. As the entry point for those requests, it
processes your IP address.
-
Resend (Resend Inc.): Delivery of free-trial and support emails. Receives your
email address and name.
-
Culqi (Peru) and Lemon Squeezy (international): Payment processing. Your card
details are entered directly into their forms and never pass through our
servers.
-
Cloudflare (Turnstile): Anti-bot verification of the free-trial form, when
enabled. Receives your IP address to validate the challenge.
-
Google Ads: If you arrived from one of our ads, we report to Google that the
click resulted in an activation, using the click identifier (gclid). Neither your email nor any
other personal data is sent.
We do not sell, rent or share your data with third parties for
commercial or marketing purposes.
More information about Firebase's privacy practices:
firebase.google.com/support/privacy
5. Data Retention
We retain your data for as long as:
- Your license remains active.
- For the 90 days following the expiration of your license (to facilitate renewals).
Usage and diagnostic events (point 1.d) are retained in aggregate form to analyse
stability and usage trends. Deleting your account removes the identifier linking them to you, after
which they are no longer personal data.
You may request the immediate deletion of your data at any time.
6. Data Security
We implement the following security measures:
- Encrypted connections via HTTPS/TLS.
- Secure storage in Firebase (SOC 2, ISO 27001 certified).
- Passwords stored with secure hashing (managed by Firebase Authentication).
- Hardware validation to prevent the use of licenses on unauthorized devices.
7. Your Rights
You have the right to:
- Access the personal data we store about you.
- Rectify incorrect or outdated data.
- Delete your account and all your associated data.
- Withdraw consent and stop using the service at any time.
- Portability of your data in a structured format (JSON/CSV).
- Object to the processing of your data for purposes other than those stated.
8. How to Exercise Your Rights
For any request relating to your personal data:
- Send an email to: soporte@bimsaddin.com
- Indicate in the subject line: "BIMS Privacy Request"
- We will respond within a maximum of 30 business days.
- For account deletion, we will request confirmation before proceeding.
9. Cookies and Tracking
In the plugin: BIMS is a desktop application and does not use
cookies. Its network communications are those described in point 2: license validation,
free-trial sign-up, update downloads, and the usage and diagnostic events of point 1.d.
On this website: bimsaddin.com uses Google Analytics to measure
traffic and understand which pages are useful. Analytics sets cookies in your browser. You can
prevent this by blocking cookies in your browser or using any blocking extension; the site and the
download work just the same. This is independent of the plugin: installing BIMS does not entail any
cookie-based tracking.
10. Minors
Our service is intended for engineering and architecture professionals.
We do not knowingly collect data from individuals under 18 years of age.
11. Changes to this Policy
We may update this policy from time to time. Significant changes will be communicated
by email at least 15 days in advance. The date of the most recent update
is shown at the top of this document.
12. Legal Compliance
This policy complies with:
- GDPR — General Data Protection Regulation (European Union)
- Law No. 29733 — Personal Data Protection Law (Peru)
- Applicable privacy regulations in the user's jurisdiction
13. International Data Transfers
Your data may be processed on Firebase servers located outside your country of residence.
Firebase complies with international data transfer frameworks (EU SCCs) and applies
equivalent protection standards.