Privacy Policy

Last updated: February 2025

1. Introduction

NeuraBIM ("NeuraBIM", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at neurabim.com and use our software platform.

NeuraBIM is a company registered in England and Wales. Our registered office is in London, United Kingdom.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, job title, and password when you create an account.
  • Contact Information: Information you provide when you request a demo, submit a contact form, or correspond with us via email.
  • Payment Information: Billing details processed securely through our third-party payment processor. We do not store card numbers on our servers.
  • Project Data: BIM models, clash detection results, and coordination data you upload to or create within our platform.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent on pages, and other interaction data.
  • Device Information: Browser type, operating system, device type, and screen resolution.
  • Log Data: IP address, access times, referring URLs, and error logs.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our platform and services
  • Process your transactions and manage your account
  • Send you technical notices, updates, and support communications
  • Respond to your enquiries and demo requests
  • Analyse usage patterns to improve user experience
  • Comply with legal obligations

4. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience. These include:

  • Essential Cookies: Required for the website to function properly.
  • Analytics Cookies: Help us understand how visitors interact with our website.
  • Preference Cookies: Remember your settings and preferences.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect your experience on our site.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

  • Service Providers: Third-party companies that help us operate our platform (hosting, analytics, payment processing).
  • Legal Requirements: When required by law, regulation, or legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

We never share your project data with third parties or use it for AI model training purposes.

6. Data Security

We take reasonable measures to protect your data:

  • Encryption in transit. All traffic to NeuraBIM services is served over HTTPS (TLS 1.2 or higher), with certificates managed via Let's Encrypt.
  • Encryption at rest. Your data is stored on AWS S3 (eu-west-2) and Supabase-managed PostgreSQL, both of which encrypt data at rest by default using AES-256.
  • Trusted infrastructure. We host on providers that maintain independent security certifications, including AWS (ISO 27001, SOC 2) and Supabase (SOC 2). NeuraBIM itself does not currently hold an independent ISO 27001 or SOC 2 certification.
  • Role-based access controls. Access to project data is scoped by role (Project Owner, Project Admin, Member, and Viewer), with permissions enforced on both the API and the user interface.
  • Credential handling. Passwords and API keys are stored as bcrypt hashes; session tokens are kept in memory on the client where possible and never written to disk in our Revit plugin.
  • Tenant isolation. Data is logically segregated per organisation and project.

We continue to invest in our security posture and will update this section as our practices evolve.

7. Your Rights Under GDPR and UK GDPR

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights in relation to your personal data:

  • Right of access. Request a copy of the personal data we hold about you.
  • Right to rectification. Request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"). Request deletion of your personal data, subject to legal retention requirements.
  • Right to restrict processing. Request that we limit how we use your data while a query is resolved.
  • Right to data portability. Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object. Object to processing of your personal data, including for direct marketing.
  • Right to withdraw consent. Where processing is based on consent, you may withdraw it at any time.

How to exercise these rights. To make a request, email info@neurabim.com from the address associated with your account. We will verify your identity and respond within 30 days, as required by Article 12(3) GDPR. If we cannot fulfil a request (for example, where retention is required by law or to defend legal claims), we will explain why.

Right to lodge a complaint. You also have the right to lodge a complaint with a supervisory authority. In the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, your local data protection authority.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymise your data within 90 days, except where we are required to retain it for legal or regulatory purposes.

9. International Transfers

Your data is primarily stored within the United Kingdom and European Union. If we need to transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: