Legal
Privacy Policy
What we collect, why, how long we keep it, and what you can ask us to do about it.
Neosphyr Ltd
Version 1.0 · Effective 4 October 2026
1. The short version
We sell Revit plug-ins. To do that we need to know who bought a licence and to check that licence is valid. We also receive a small amount of information about how the software behaves, so that we can fix faults and decide what to build.
We never receive the content of your Revit models. No geometry, no parameter values, no drawings, no schedules. We also never receive file names, project names, folder paths, family, type, parameter or level names, or the name of your machine — everything the software sends passes through a filter that removes them, on your computer and again on our servers, and anything that does not come out clean is discarded rather than sent.
We do not sell data, we do not share it for advertising, and we do not profile you.
2. Who we are
Neosphyr Ltd is the data controller for the information described here. We are registered in England and Wales under company number 17473213, at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
For anything in this policy, write to [email protected].
3. What we collect, and why
3.1 When you visit this website
Our website is served by Cloudflare. Cloudflare records the standard information any web server receives — IP address, browser type, which pages were requested and when — and uses it to deliver the site and to block abuse. We do not run advertising trackers, and we do not build profiles of visitors.
Every page loads its typefaces from Google Fonts. This means Google receives your IP address and browser details when a page is opened, in order to serve the font files. It is not used to identify you to us, and we receive nothing from it.
One page carries a product video hosted on YouTube. Nothing is requested from YouTube or Google until you press play — until then you are looking at a still image served from our own site. If you do press play, YouTube receives your IP address and sets its own cookies. We use the privacy-enhanced player, which does not set advertising cookies, but the request is YouTube’s rather than ours, and Google’s own privacy policy governs it.
3.2 When you buy a licence
Payments are handled by Stripe. Your card details go to Stripe, never to us: we receive the result of the payment, the billing name and email address, the country and the VAT treatment, and an identifier for the transaction. We need this to supply what you bought, to issue the licence, and to meet our accounting and tax obligations.
3.3 When the software checks your licence
Each installation verifies its licence with our servers — when you activate it, and periodically afterwards. That check sends your licence key, a hardware-derived identifier for the device, the product name and the software version.
This cannot be turned off: it is how a licence works. It is described in section 10.1 of the Licence Agreement.
3.4 Usage statistics and fault reports
The software can send two further streams. Both are explained in a panel that appears the first time you press one of our buttons, where you choose what each one does. Diagnostics start switched off. You can change your choice whenever you like: open Help inside the plug-in and press Usage and diagnostic data. Switching anything off costs you nothing: no feature is withheld.
| Stream | What it contains | Default |
|---|---|---|
| Usage | The name of the command pressed, whether it succeeded, the version of Revit and the version of the plug-in | On |
| Diagnostics | The type of a fault and the place in our own code where it happened | Off until you turn it on |
Neither stream carries anything that identifies you, your employer or your client's project. Each installation is identified by a code derived from the machine's hardware, which we cannot resolve to a person: it tells us that two reports came from the same computer, and nothing else.
We are aware that a Revit model is routinely covered by a confidentiality obligation towards the building owner. A stack trace carrying a path like C:\Projects\ACME_Tower_Confidential\model.rvt would not merely breach our own policy — it could put you in breach of your agreement. That is why the filter exists, why it runs twice, and why a value that does not scrub clean is dropped instead of sent.
3.5 When you write to us
If you email us, or send a message through the website, we keep that correspondence so we can answer and so we have a record of what was agreed. Our email is handled by Google Workspace, and licence emails are delivered through Resend.
4. Our legal basis
| What | Basis under UK GDPR |
|---|---|
| Supplying the software and checking licences | Performance of a contract |
| Taking payment, invoicing, tax records | Legal obligation, and performance of a contract |
| Answering your messages | Legitimate interests — running a business that replies to its customers |
| Usage statistics and fault reports | Legitimate interests — keeping the software working and deciding what to improve, balanced against the fact that the data identifies a machine rather than a person, carries nothing about your projects, and can be switched off in one click |
| Website security and abuse prevention | Legitimate interests |
Where we rely on legitimate interests, you can object — see section 7.
5. Who else sees it
We use a small number of service providers, each for one purpose, each bound to use the data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Google (Firebase and Google Cloud) | Licence database, licence checks, usage and fault reports | United Kingdom and European Union |
| Cloudflare | Website and installer downloads | Global edge network |
| Google (YouTube) | The product video on the Avatar page, and only once you press play | Global |
| Google (Fonts) | The typefaces this website is set in | Global |
| Stripe | Card payments | Ireland, United States |
| Resend | Licence and transactional emails | European Union, United States |
| Google Workspace | Our own email | European Union, United States |
We do not sell personal data, and we do not share it with anyone for their own marketing.
We may disclose information if the law requires it, or to establish or defend a legal claim.
6. Where it is stored, and for how long
Our licence database and the usage and fault reports are held in Google Cloud regions in the United Kingdom and the European Union. Where a provider processes data outside the UK, that transfer is covered by the UK International Data Transfer Addendum or by the standard contractual clauses, as applicable.
| What | Kept for |
|---|---|
| Licence records and activations | While the licence is live, then 7 years for accounting |
| Payment and invoice records | 7 years, as UK tax law requires |
| Individual fault and usage reports | 90 days, then deleted automatically |
| Daily totals derived from them | Indefinitely — these are counts, and contain no identifier |
| Correspondence | 3 years from the last message, unless it relates to a contract or a dispute |
7. Your rights
Under UK data protection law you can ask us to:
- give you a copy of what we hold about you;
- correct it, if it is wrong;
- delete it, where we have no continuing reason to keep it;
- restrict what we do with it while a question is resolved;
- give it to you, or to someone else, in a portable form;
- stop processing it where we rely on legitimate interests — including the usage and fault reports, which you can also simply switch off in the software.
Write to [email protected]. We will answer within one month. There is no charge.
One honest limitation: the usage and fault reports are tied to a hardware-derived code, not to your name or email. If you ask us to find or delete your reports, we will need that code to locate them — it is shown at the foot of the Help window inside each plug-in. Without it we have no way to tell your reports from anyone else's, which is a consequence of collecting as little as we do.
8. Complaints
If you think we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113.
9. Changes to this policy
If we change what we collect or why, we will update this page and change the version and date at the top. Where a change is significant, we will tell existing customers by email, and the software will show the first-run panel again so that the choice is made against the new description rather than the old one.
Neosphyr Ltd. Registered in England and Wales, company number 17473213. Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.
Autodesk and Revit are registered trademarks of Autodesk, Inc. We are not affiliated with or endorsed by Autodesk, Inc.