Privacy policy
Last updated 19 August 2026.
This policy covers bimspection.org — the website and the licensee portal you sign in to. The BIMspection desktop application works very differently and is covered separately at the end.
Who is responsible
BIMspection, contact [email protected], is the controller of the personal data described here.
What we collect, and why
| Data | Collected when | Why |
|---|---|---|
| Email address | You create an account | Identifies your account; it is how you sign in |
| Your name | You create an account | So we know who we are dealing with over support |
| Password | You create an account | Stored only as a salted PBKDF2-SHA256 hash. We cannot read it and cannot tell you what it is |
| Organization and contact | We issue your license | To know which license belongs to which customer |
| IP address and browser user-agent | You download an installer | A record of which license took which release, so we can see whether a license is being used beyond its seats |
| Timestamps | Account creation, sign-in, download | Support, and the same license-compliance purpose |
Our lawful basis is performance of a contract for the account and license data, and legitimate interest — protecting licensed software from unlicensed redistribution — for the download record.
Installed application licensing
License activation sends your portal email and password securely to this service. The installed app does not retain your portal password. We store an installation identifier, its associated account, a hashed activation token, and activation/check-in times to maintain your license. Subscription permissions are checked periodically. License changes and seat releases are recorded for administration. These checks do not send inspection notes, photographs, model contents, or Autodesk credentials to us.
What we do not do
- No analytics, no tracking. There is no Google Analytics, no advertising pixel and no third-party tracking script anywhere on this site.
- No third-party resources. Every font, image and script is served from this domain, so simply loading a page here sends your details to nobody.
- We never sell or share your data for marketing, and pass it to nobody except the hosting provider named below.
- We do not see your inspection work. Observations, notes and site photographs never reach this website.
Cookies
One cookie, bimspection_portal. It is set when you sign in, marks your
browser as signed in, and does nothing else. It is HttpOnly, so scripts cannot read it,
and it expires after 30 days or when you sign out. There are no advertising, analytics
or cross-site cookies here, which is why this site has no cookie banner.
Who else processes it
Cloudflare, Inc. hosts this site and its database and therefore processes all traffic to it, including IP addresses, as our processor. They are the only third party involved.
How long we keep it
- Account and license records — while the account exists, and afterwards only as long as we must keep sales records.
- Download records, including the IP address — deleted automatically after 12 months. This is enforced by the software itself, not by a promise to remember.
- Sign-in sessions — deleted when they expire at 30 days, or immediately when you sign out.
Your rights
You may ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. Email [email protected] and we will act within 30 days. Deleting your account ends your access to downloads but does not by itself cancel your license.
You can change your password at any time from your account page. If you are in the UK or the EU you also have the right to complain to your data protection authority.
The desktop application is different
Your inspection data never comes to us. Observations, notes,
photographs and the accounts created inside the application are written only to the
computer it is installed on, under %LOCALAPPDATA%\BIMspection. They are
not uploaded, synchronised or visible to us, and this policy does not apply to them.
That data is entirely yours to control — and to back up.
The application does contact Autodesk Platform Services, using credentials you supply, to translate and display your models. Those models live in your own Autodesk storage under your own Autodesk account and their terms, not ours. If you switch on Activate Mobile, traffic between your phone and your computer is relayed through Cloudflare for as long as that link is open.
Changes
If this policy changes materially we will update the date at the top and, where the change affects you, tell account holders by email.