Overview & Scope
This Privacy Policy (“Policy”) is published by BIM CONNECT (“Company,” “we,” “us,” or “our”) and governs how we collect, store, use, and disclose personal information when you access or use the BIM CONNECT platform, website, mobile applications, APIs, and all associated services (collectively, the “Services”).
By accessing or using our Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please discontinue use of our platform. This Policy should be read alongside our Terms of Service.
Who this applies to: All users of BIM CONNECT — individual professionals, enterprise clients, project collaborators, and website visitors — regardless of geographic location. Additional rights may apply based on your jurisdiction (see Section 09).
BIM CONNECT operates as both a data controller (for account and usage data) and, in certain contexts, a data processor (for BIM project data uploaded by our business clients). Where BIM CONNECT acts as a processor, our clients’ own privacy policies also apply.
Information We Collect
We collect information you provide directly, information generated through your use of our Services, and in limited cases, information from third parties. We collect only what is necessary to provide and improve our platform.
| Category | Examples | Collection Method |
|---|---|---|
| Account Information | Name, email, job title, company, password (hashed) | Provided by you at registration |
| Professional Profile | Discipline, certifications, BIM software proficiencies, portfolio | Provided voluntarily by you |
| Project & BIM Data | Uploaded models, IFC files, drawings, project metadata, collaboration records | Uploaded by you or your team |
| Payment Information | Billing name, address, payment confirmation tokens | Via PCI-compliant payment processor |
| Usage & Technical Data | IP address, browser type, pages visited, feature interactions | Automatically via cookies and logs |
| Communications | Support tickets, chat messages, feedback forms, emails to us | Provided by you |
| Device Information | Device type, OS, screen resolution, browser version | Automatically collected |
| Collaboration Activity | Comments, markups, approvals, version history, access logs | Generated by platform use |
Important: We do not collect sensitive personal data such as health information, racial origin, political opinions, or biometric data. Please do not upload such information to the platform.
How We Use Your Data
We process your information only where we have a lawful basis to do so. Our processing activities are grouped by purpose:
• Service Delivery: To provide, maintain, and operate the BIM CONNECT platform, including account management, project hosting, collaboration tools, and model coordination features.
• Authentication & Security: To verify your identity, manage access permissions, detect and prevent fraud, unauthorized access, and other security threats.
• Billing & Payments: To process subscription fees, invoices, and refunds in compliance with applicable financial regulations.
• Support & Communication: To respond to support requests and send service-critical notifications such as downtime alerts and security notices.
• Platform Improvement: To analyze aggregated usage patterns, diagnose technical issues, and develop new features — always in anonymized or pseudonymized form.
• Marketing (with consent): To send product updates and relevant industry content, only where you have opted in. You may unsubscribe at any time.
• Legal Compliance: To comply with applicable laws, court orders, or regulatory requirements in jurisdictions where we operate.
• Legitimate Business Interests: To prevent fraud, enforce our Terms of Service, and protect the rights of BIM CONNECT and our users.
We do not sell your personal data. BIM CONNECT does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes — under any circumstances.
Data Sharing & Disclosure
We share your information only in the limited circumstances described below. All third-party service providers we engage are contractually bound to protect your data and prohibited from using it for their own purposes
| Receipient | Purpose | Safeguards |
|---|---|---|
| Cloud Infrastructure Providers | Hosting, storage, and content delivery | DPA in place, ISO 27001 certified |
| Payment Processors | Secure transaction processing | PCI DSS Level 1 compliance |
| Analytics Providers | Aggregated usage analytics (no individual profiling) | Data anonymization, DPA in place |
| Customer Support Tools | Ticket management and live support | Contractual data restriction, DPA |
| Legal & Regulatory Authorities | Compliance with valid legal requests | Disclosed only as required by law |
| Business Successors | In the event of merger, acquisition, or asset sale | Equivalent privacy protections; users notified |
Your project collaborators — users you invite to a project — can access data you share within that project environment. You control who is invited and what permissions they receive.
BIM Project Data & Intellectual Property
BIM CONNECT is a professional platform for design and construction collaboration. The models, drawings, IFC files, and project data you upload remain entirely yours.
Your data. Your IP.
BIM CONNECT claims no ownership over your project files, models, or intellectual property. We act as a custodian — storing and processing your data solely to deliver the Services you have subscribed to. We will never use your project data to train AI models, benchmark competitor tools, or share proprietary designs without your explicit written consent.
• Project files are encrypted at rest (AES-256) and in transit (TLS 1.3
• Access to your project environment is restricted to users you explicitly authorize.
• BIM CONNECT staff access project data only when required to provide technical support, and only with your knowledge and consent.
• Upon account deletion, files are purged from active systems within 30 days and from backups within 90 days, unless legally required to retain them.
• Enterprise clients may request custom data residency and dedicated storage — contact your account manager for details.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable laws and regulations.
| Data Type | Retention Period |
|---|---|
| Account & Profile Data | Duration of active account + 12 months after deletion request |
| BIM Project Files | Active subscription period + 30-day grace after account closure |
| Usage & Log Data | 12 months (aggregated anonymous data may be retained indefinitely) |
| Billing Records | 7 years (financial regulation requirements) |
| Support Communications | 3 years from last interaction |
| Marketing Consent Records | Until consent is withdrawn + 3 years |
When data is no longer needed, it is securely deleted or anonymized in accordance with industry-standard practices.
Protecting your data is a core engineering priority at BIM CONNECT. We implement multi-layered security controls across our infrastructure and application stack./h2>
Protecting your data is a core engineering priority at BIM CONNECT. We implement multi-layered security controls across our infrastructure and application stack.
| ENCRYPTION AT REST | ENCRYPTION IN TRANSIT | ACCESS CONTROL | AUTHENTICATION | INFRASTRUCTURE |
|---|---|---|---|---|
| AES-256 | TLS 1.3 | RBAC | MFA Ready | ISO 27001 |
• Regular third-party penetration testing and vulnerability assessments conducted at least annually.
• Continuous monitoring and intrusion detection systems across all production infrastructure.
• All staff undergo data protection and security training annually, including secure development practices.
• In the event of a data breach, affected users will be notified within 72 hours where required by applicable law.
• Secure software development lifecycle (SDLC) with mandatory code review, static analysis, and security testing.
Your responsibility: While we employ industry-leading security practices, you are responsible for keeping your login credentials confidential and enabling multi-factor authentication (MFA) on your account.
Cookies & Tracking Technologies
BIM CONNECT uses cookies and similar technologies to operate and improve our platform:
| Cookie Type | Purpose | Can Opt Out? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security settings. Essential to platform operation. | No |
| Functional | Remember preferences: language, dashboard layout, notification settings. | Optional |
| Analytics | Understand navigation and feature usage. Data is aggregated and anonymized. | Yes (consent) |
| Marketing | Deliver relevant content and measure campaign effectiveness, where consent is given. | Yes (consent) |
Manage cookie preferences at any time via Cookie Settings in the platform footer. Disabling certain cookies may affect platform functionality.
Your Privacy Rights
Depending on your location, you have the following rights regarding your personal data. We are committed to honoring these rights promptly and without undue barrier.
| Right | Description |
|---|---|
| Right of Access | Request a copy of all personal data we hold about you, including categories and purposes of processing. |
| Right to Rectification | Request correction of any inaccurate or incomplete personal data without undue delay. |
| Right to Erasure | Request deletion of your personal data (the ‘right to be forgotten’), subject to legal retention requirements. |
| Right to Data Portability | Receive your personal data in a structured, machine-readable format (e.g., JSON, CSV). |
| Right to Object | Object to processing based on legitimate interests or for direct marketing purposes at any time. |
| Right to Restrict Processing | Request that we limit how we process your data in certain circumstances, such as during a dispute. |
| Right to Withdraw Consent | Withdraw previously given consent at any time without affecting the lawfulness of prior processing. |
| Right to Lodge a Complaint | File a complaint with your local supervisory authority (e.g., UAE Data Office, your EU/EEA DPA). |
To exercise any of these rights, submit a request to privacy@bimconnect.com or via the Privacy Center in your account settings. We respond within 30 days; complex requests may be extended by 60 days with prior notice.
Children’s Privacy
BIM CONNECT is a professional platform intended solely for users aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18.
If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that information and terminate the associated account. If you believe a minor has registered on our platform, please contact us at privacy@bimconnect.com immediately.
International Data Transfers
BIM CONNECT serves users globally including the GCC region, Europe, South Asia, and beyond. Your data may be transferred to and processed in countries other than your own. Where such transfers occur, we ensure appropriate safeguards are in place:
• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA.
• Data Processing Agreements with all sub-processors that include binding data protection obligations.
• Compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) for UAE-based users.
• Compliance with applicable data localization requirements where mandated by law.
Enterprise data residency: Enterprise clients requiring data residency within a specific jurisdiction (e.g., UAE, EU, KSA) may request dedicated regional hosting. Contact enterprise@bimconnect.com.
Policy Updates
We may update this Privacy Policy from time to time. When we make material changes, we will:
• Update the “Last Reviewed” date at the top of this Policy.
• Send a notification to the primary email address associated with your account.
• Display a prominent notice within the BIM CONNECT platform for at least 14 days following the update.
Your continued use of the Services after the effective date of any updates constitutes your acceptance of the revised Policy. All previous versions are available upon written request.
Contact & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
| Right | Description |
|---|---|
| Data Protection Officer | privacy@bimconnect.com |
| General Privacy Inquiries | privacy@bimconnect.com |
| Legal & Compliance | legal@bimconnect.com |
| Enterprise Privacy | enterprise@bimconnect.com |
| Registered Address | BIM CONNECT, Dubai, United Arab Emirates |
| Response Time | 6 business days (general); 30 days for formal data subject requests |
You also have the right to file a complaint with the relevant supervisory authority. In the UAE: UAE Data Office. In the EU/EEA: your local Data Protection Authority (DPA). We encourage you to contact us first so we can resolve any concern directly.