BIMKraft Privacy Policy

Effective Date: December 30, 2024 Last Updated: December 30, 2024


Introduction

BIMKraft ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our Autodesk Revit plugin.

This policy complies with the EU General Data Protection Regulation (GDPR), Autodesk App Store requirements, and other applicable data protection laws.


1. Data Collection

1.1 What BIMKraft Does NOT Collect

BIMKraft does NOT collect, store, or transmit any personal data or project data to external servers.

We do NOT collect:

  • Personal information (name, email, address, phone number)
  • Project files or Revit model data
  • Element data or parameters from your projects
  • Usage analytics or telemetry
  • Behavioral tracking data
  • Device fingerprints or hardware information
  • IP addresses or location data
  • Crash reports or error logs

1.2 Local Data Storage (On Your Computer Only)

BIMKraft stores the following information locally on your machine only:

License Cache:

  • Your Autodesk App Store license status is cached locally for 24 hours
  • Purpose: Reduce API calls to Autodesk servers
  • Location: %AppData%\BIMKraft\entitlement_cache.json
  • Retention: Automatically deleted after 24 hours

Tool Settings:

  • Parameter presets, workset rules, and other tool configurations you create
  • Location: %AppData%\BIMKraft\
  • Retention: Until you manually delete or uninstall BIMKraft

Trial Data (If Using Free Trial):

  • Trial start/end dates with integrity hashes
  • Location: %AppData%\BIMKraft\trial.dat
  • Retention: Until trial expires or you uninstall BIMKraft

Offline License Keys (Legacy Users):

  • If you purchased directly (not via App Store), your encrypted license key is stored locally
  • Location: %AppData%\BIMKraft\license.dat
  • Encryption: Windows DPAPI (Data Protection API)
  • Retention: Until you deactivate or uninstall

None of this data leaves your computer. BIMKraft runs entirely offline except for license validation.


2. Third-Party Data Sharing

2.1 Autodesk Entitlement API (App Store Users)

The only external communication BIMKraft makes is with Autodesk's Entitlement API to validate your App Store subscription:

What is sent:

  • Your Autodesk user ID (automatically provided by Revit when you're logged into your Autodesk account)
  • App ID: com.bimkraft.revittools

Purpose:

  • To verify you have an active BIMKraft subscription purchased via the Autodesk App Store

Who receives it:

  • Autodesk Inc. (the platform provider)

Data protection:

What we receive:

  • A simple true/false response indicating subscription validity
  • We do NOT receive your email, payment info, or any personal data from Autodesk

Frequency:

  • Once per Revit session (when you launch Revit)
  • Cached locally for 24 hours to minimize API calls

2.2 No Other Third Parties

BIMKraft does NOT use:

  • Google Analytics or other analytics tools
  • Advertising networks or tracking pixels
  • Third-party SDKs or libraries that collect data
  • Crash reporting services (Sentry, Bugsnag, etc.)
  • Email marketing platforms
  • Customer relationship management (CRM) systems
  • Cloud storage or backup services

We NEVER:

  • Sell your data to third parties
  • Share data with advertisers or data brokers
  • Track your behavior across websites or applications
  • Send your data to our own servers

3. Data Retention and Deletion

Since BIMKraft does not collect data on external servers, there is no centralized data retention policy.

3.1 Local Data Retention

Data Type Location Retention Period
Entitlement cache %AppData%\BIMKraft\entitlement_cache.json 24 hours (auto-deleted)
Tool settings %AppData%\BIMKraft\ Until manual deletion or uninstall
Trial data %AppData%\BIMKraft\trial.dat Until trial expires or uninstall
Offline license %AppData%\BIMKraft\license.dat Until deactivation or uninstall

3.2 Automatic Deletion

When you uninstall BIMKraft, all local data is automatically removed from:

  • %AppData%\Autodesk\Revit\Addins\[Version]\BIMKraft.dll
  • %AppData%\BIMKraft\

No data remains on your computer after uninstallation.


4. User Rights: Revoking Consent and Data Deletion

4.1 Right to Access

Since BIMKraft does not collect data on external servers:

  • All your data is already on your local computer
  • Navigate to %AppData%\BIMKraft\ to view local files
  • No need to request data from us (you have it all)

4.2 Right to Erasure ("Right to be Forgotten")

To delete all BIMKraft data:

Option 1: Uninstall BIMKraft (Recommended)

  1. Windows Settings → Apps → Installed Apps
  2. Search for "BIMKraft"
  3. Click Uninstall
  4. All settings and cache data are automatically deleted

Option 2: Manual Deletion

  1. Navigate to: %AppData%\BIMKraft\
  2. Delete the entire folder
  3. Navigate to: %AppData%\Autodesk\Revit\Addins\[Version]\
  4. Delete BIMKraft.dll and BIMKraft.addin

4.3 Right to Data Portability

Not applicable - BIMKraft does not collect data in a centralized database.

Your local settings are stored in JSON format and can be copied/exported manually from %AppData%\BIMKraft\ if needed.

4.4 Right to Withdraw Consent

To stop using BIMKraft and revoke all data processing:

  1. Cancel Subscription:

    • Autodesk App Store users: Manage subscription in your Autodesk account settings
    • Direct purchase users: Email support@bimkraft.de to cancel
  2. Uninstall BIMKraft:

    • Follow uninstallation steps in Section 4.2
  3. Delete Autodesk Account Data (Optional):

    • Your Autodesk App Store subscription data (email, payment info) is managed by Autodesk, not BIMKraft
    • To delete: Contact Autodesk support or manage at https://accounts.autodesk.com/

5. GDPR Compliance

BIMKraft complies with the General Data Protection Regulation (GDPR) and respects all user rights:

5.1 Data Processing Principles

Lawfulness, fairness, transparency: We clearly explain our data practices ✅ Purpose limitation: Data used only for stated purposes ✅ Data minimization: We collect the absolute minimum (nearly nothing) ✅ Accuracy: You control all local data ✅ Storage limitation: Local data deleted on uninstall ✅ Integrity and confidentiality: Local data encrypted with Windows DPAPI ✅ Accountability: We document and enforce these principles

5.2 Your GDPR Rights

Right How to Exercise
Right to Access Navigate to %AppData%\BIMKraft\ (all data is local)
Right to Rectification Edit files in %AppData%\BIMKraft\ or use tool settings UI
Right to Erasure Uninstall BIMKraft (see Section 4.2)
Right to Restriction Disable specific tools or uninstall
Right to Data Portability Copy files from %AppData%\BIMKraft\
Right to Object Uninstall BIMKraft to stop all processing
Right to Withdraw Consent Cancel subscription + uninstall (see Section 4.4)

5.3 Data Processing Location

All processing happens locally on your Windows computer.

No data crosses international borders (except the Autodesk API call, which uses HTTPS encryption and complies with GDPR via Autodesk's Data Processing Agreement).

5.4 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you can file a complaint with:

EU Data Protection Authorities:


6. Security

6.1 Security Measures

Technical Safeguards:

  • Encryption at rest: Local license data encrypted using Windows DPAPI (AES-256)
  • Encryption in transit: HTTPS (TLS 1.3) for Autodesk API calls
  • No network storage: Your project files never leave your computer
  • Secure API calls: Autodesk Entitlement API uses OAuth 2.0 authentication

Organizational Safeguards:

  • No access: We have no access to your computer or data
  • No backend: No database or server to be hacked
  • Minimal attack surface: Only one API endpoint (Autodesk)

6.2 Data Breach Notification

Since BIMKraft does not collect data on external servers:

  • No centralized data = No risk of mass data breach
  • Local data only = Your data security depends on your computer security

Best practices for your security:

  • Keep Windows and antivirus software up to date
  • Use strong passwords and enable Windows account protection
  • Enable BitLocker or similar disk encryption (optional)

7. Cookies and Tracking

7.1 Website Cookies (bimkraft.de)

Our website uses minimal cookies:

Essential Cookies (Required):

  • Session cookies for contact form functionality
  • No personal data stored

Analytics Cookies (Optional):

  • Currently: None
  • Future: May use privacy-friendly analytics (Plausible) with opt-in consent

Marketing Cookies:

  • Not used

7.2 Plugin Tracking

BIMKraft plugin does NOT use cookies or tracking technologies.

No analytics, no telemetry, no tracking.


8. Children's Privacy

BIMKraft is a professional software tool for Autodesk Revit users and is not intended for children under 16.

  • We do not knowingly collect data from children
  • If you believe a child has provided data, contact: privacy@bimkraft.de
  • We will delete any identified child data immediately

9. International Data Transfers

9.1 Autodesk API Calls

When validating your App Store subscription:

  • Data is sent to Autodesk's servers (may be located in the US or EU)
  • Transfer complies with GDPR via:
    • Standard Contractual Clauses (SCCs)
    • EU-US Data Privacy Framework (if applicable)
    • Autodesk's Data Processing Agreement

9.2 No Other Transfers

Since BIMKraft does not collect data, there are no other international data transfers.


10. Changes to This Policy

10.1 Notification of Changes

We may update this privacy policy to reflect:

  • Changes in features or functionality
  • Legal requirements
  • Best practices

How you'll be notified:

  • Updated policy posted at: https://bimkraft.de/privacy-policy
  • "Last Updated" date will be changed at the top of this page
  • Material changes: 30 days' notice via email (if we have your email from support tickets)

10.2 Acceptance

Continued use of BIMKraft after policy changes = acceptance of new terms

If you disagree with changes:

  1. Cancel your subscription
  2. Uninstall BIMKraft
  3. Request deletion of any support ticket data (email privacy@bimkraft.de)

11. Contact Information

11.1 Data Controller

BIMKraft Maria Simon [Your Address] [City, Postal Code] Germany

11.2 Privacy Inquiries

Email: privacy@bimkraft.de Response time: Within 5 business days Formal requests (GDPR): Within 30 days (legal requirement)

11.3 General Support

Email: support@bimkraft.de Website: https://bimkraft.de Business hours: Monday - Friday, 9:00 AM - 6:00 PM CET


12. California Privacy Rights (CCPA)

For California residents, the following additional rights apply:

12.1 Right to Know

Categories of data collected:

  • None (BIMKraft does not collect personal information)

Sources of data:

  • Not applicable

Business purpose:

  • Not applicable (no data collection)

Third parties we share with:

  • Autodesk Inc. (only for license validation)

12.2 Right to Delete

You can request deletion of any data by:

  • Uninstalling BIMKraft (deletes all local data)
  • Emailing privacy@bimkraft.de for support ticket deletion

12.3 Right to Opt-Out of Sale

We do NOT sell your personal information.

BIMKraft does not sell, rent, or share personal data with third parties for monetary or other valuable consideration.

12.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights:

  • No denial of service
  • No different pricing or rates
  • No reduced quality of service

To exercise CCPA rights: privacy@bimkraft.de


13. Autodesk App Store Compliance

This privacy policy complies with Autodesk App Store requirements:

13.1 Data Collected

Identified and described: See Section 1 (minimal local data only)

13.2 Third-Party Data Sharing

Disclosed: Autodesk Entitlement API only (see Section 2.1) ✅ Same protection: Autodesk complies with their own privacy policy

13.3 Data Retention and Deletion

Explained: See Section 3 (local data, deleted on uninstall)

13.4 User Control

Revoke consent: Uninstall + cancel subscription (see Section 4.4) ✅ Request deletion: Automatic on uninstall (see Section 4.2)


14. Summary (TL;DR)

What You Need to Know:

BIMKraft does NOT collect any personal or project dataAll processing happens locally on your computerOnly external call: Autodesk's license API (for App Store validation)Uninstalling BIMKraft deletes all local dataNo analytics, no tracking, no ads, no third partiesGDPR and CCPA compliantYour data stays on your computer. Period.


15. Your Consent

By using BIMKraft, you consent to:

  • Local storage of tool settings and license cache on your computer
  • Communication with Autodesk's Entitlement API for subscription validation (App Store users only)

You can withdraw consent at any time by:

  1. Canceling your subscription (Autodesk account settings)
  2. Uninstalling BIMKraft (Windows Settings → Apps)

If you have questions or concerns about this Privacy Policy, please contact us at privacy@bimkraft.de.


Privacy Policy Version 2.0 - Autodesk App Store Edition Effective: December 30, 2024

Your Privacy Matters

We are committed to protecting your privacy and being transparent about our data practices. For privacy-related questions or to exercise your rights:

  • Privacy Email: privacy@bimkraft.de
  • Data Requests: Access, modify, or delete your data
  • Response Time: Within 30 days (GDPR requirement)