Privacy Policy

Bimiq provides an AI platform that reviews construction drawings, checks submittals and specifications, coordinates project information, and answers questions about a project. This policy covers the Bimiq website at getbimiq.com, the Bimiq web application, and the Bimiq Bridge desktop application.

For any privacy question, or to exercise the rights below, contact us at privacy@getbimiq.com.

We collect three kinds of information.

Account data

Your name, email address, organisation, and the authentication identifier from your sign-in method. If you sign in with Google or GitHub, we receive your basic profile from them, not your password.

Project content

The documents you upload or import (drawings, specifications, submittals, correspondence), and everything Bimiq derives from them: findings, verdicts, clash issues, RFIs and logged decisions.

Usage data

How the product is used: pages visited, features run, credits consumed, and basic device and browser information. We use this to operate the service and to bill fairly for metered work.

We do not ask for special-category personal data, and construction project documents are not the place for it. Please do not upload documents whose purpose is to hold personal data unrelated to the project.

The parts of Bimiq that read a live Revit or Navisworks model run through the Bimiq Bridge, a small application on your own computer. The Bridge reads the model you have open and answers a specific query. The model file itself is never uploaded to us, and only the answer to a query crosses the connection.

Model changes are proposed, not applied. Bimiq drafts a change and you execute it yourself. See the security page for how the Bridge connects without a VPN, an open port, or a firewall change.

• To run the service: review your documents, produce findings, and answer your questions about a project.
• To manage your account, organisation and seats, and to authenticate you.
• To meter and bill usage, and to take payment.
• To send service messages you need, such as sign-in links, billing notices and security notifications.
• To keep the service secure, debug problems, and understand which features are used so we can improve them.

We do not sell your personal data, and we do not use your project content for advertising.

Bimiq's review runs on our AI provider through its API. Your documents are sent to the provider only to produce your result, and are returned to you as findings, verdicts and answers.

Your drawings, specifications and decisions are never used to train a public AI model. Neither we nor our AI provider train public models on your project content. Your content is used to serve you, not to build a model other firms then benefit from.

If you connect a document source such as SharePoint, Autodesk Construction Cloud, Procore or Egnyte, we access it only to import the documents you choose. These connections request read access, with a single exception: pushing an RFI you have approved back to Procore.

The access tokens for a connected source are encrypted with AES-256-GCM and unsealed only server-side, at the moment of a call. They are scoped to your organisation and are never shared across firms. You can disconnect a source at any time from your integration settings.

We share information only with the service providers that make Bimiq work, and only so they can perform their function for us. Each is bound to protect it.

Hosting and database

Cloud infrastructure that runs the application and stores your account and project records.

Document storage

Encrypted object storage for the files you upload.

AI provider

The commercial model provider that performs the review, via its API.

Payments

Our billing provider, which processes subscriptions and takes payment. We do not store full card details.

Email

The provider that delivers sign-in links and service messages.

Product analytics

A provider that helps us understand product usage.

We may also disclose information where the law requires it, or to protect the rights, safety and security of Bimiq, our users and the public. If Bimiq is involved in a merger or acquisition, information may transfer as part of that transaction, subject to this policy.

Your data is processed and stored by the providers above, which may be located in countries other than yours. Where personal data is transferred across borders, we rely on appropriate safeguards for that transfer.

Uploaded documents are encrypted in transit and at rest, and are scoped to your project and your organisation.

We keep your account and project data for as long as your account is active, so that your history stays available to you. A superseded decision or a dismissed finding is retired rather than deleted, because the record of what changed is the point of keeping it.

When you delete a project or close your account, we delete or anonymise the associated personal data within a reasonable period, except where we must keep some records to meet a legal, tax or accounting obligation.

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to object to or restrict how we use it, and to receive a copy in a portable form.

To exercise any of these, email privacy@getbimiq.com. We will respond within the time the applicable law requires. You also have the right to complain to your local data protection authority.

We use a small number of cookies and similar technologies to keep you signed in and to understand product usage. The detail, and how to control them, is in our Cookie Policy.

Bimiq is a tool for construction professionals and is not directed at anyone under 18. We do not knowingly collect personal data from children.

We may update this policy as the product and the law change. When we make a material change, we will update the date at the top and, where appropriate, tell you in the product or by email. Continuing to use Bimiq after a change means you accept the updated policy.

Questions about this policy, or about your data, go to privacy@getbimiq.com. For anything else, the contact page has the right route.