Privacy policy

The website

The purabim.com website sets no cookies, runs no analytics and has no forms. Our hosting keeps standard server logs, such as IP address, browser type and the page requested, to keep the site running and secure.

The early access button opens your own email app. Book a demo leads to pur4studios.com, which has its own privacy policy.

What the app collects

The PuraBIM app is for invited firms and the people they share projects with. It handles the following.

• Sign-in. If you sign in with Google, Google sends us your name, email address and basic profile (the openid, email and profile scopes). Sign-in is limited to your firm's email domain, and we never see your Google password. A firm can also use a shared password it sets itself.
• Project data. Schedules, project records, tasks, punch items and comments live in the Notion workspace that holds the project, usually your firm's own. The app reads and writes them through that workspace's Notion connection, and Notion's privacy policy covers how Notion stores them.
• Published files. When you publish from Revit, the 3D model, sheets and markup are stored on the PuraBIM model service, which runs on servers we rent from Hetzner Online in Finland, in the European Union. We keep the latest model and sheet set, any set kept as issued, sheet markup and project documents, plus a limited number of older versions set by an administrator.
• Questions you ask. When you use Ask the Model, your question, the earlier turns of that conversation and the project data the assistant looks up are sent to OpenAI to write the answer. OpenAI states that API data is not used to train its models by default, and that it may keep it for a limited time to monitor abuse. If you signed in with Google, we keep your Ask conversations and pinned items on the model service, linked to a one-way hash of your email, until you delete them.
• Your browser. The app keeps your settings, a copy of recently viewed project data, edits waiting to send, your recent changes (7 days) and offline copies of pages in your browser, so it opens fast and keeps working on a weak connection. Signing out clears the offline copies.

Cookies

The app sets up to four cookies, all needed for it to work and none readable by scripts on the page. There are no advertising or tracking cookies.

• Sign-in. Protects the Google sign-in handshake, and lasts 10 minutes.
• Session. Keeps you signed in and carries your name and email: 7 days after a Google sign-in, 30 days after a shared-password sign-in.
• Admin. Confirms an administrator sign-in for 12 hours.
• Demo mode. Remembers whether the app is showing only its showcase project.

Share links

A share link gives anyone who has it read-only access to one project's name, status and schedules, with internal fields hidden and no account needed. Links last 30 days, and the app never issues one for longer than 90 days. A link cannot be cancelled before it expires, so share it with care.

How we use it

We use this information to run the app, sign you in, keep it secure (including limiting repeated requests by IP address) and answer your requests. We do not sell or rent personal information, and we do not use it for advertising. For sign-in and account data we decide how it is used. For your firm's project data, we act on your firm's instructions.

Who processes it

These companies process data for us, each under its own terms and privacy policy:

• Google, for sign-in.
• Notion, which stores your firm's project data in your firm's own workspace.
• OpenAI, for answers in Ask the Model.
• Google, Notion and OpenAI are based in the United States, so data they process may leave the European Union. They rely on recognized safeguards for these transfers, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.
• Hetzner Online, which hosts the website, the app and the model service in Finland.

How long we keep it

Sessions end when their cookie expires or you sign out. Published files stay until your firm deletes them or asks us to. Ask conversations stay until you delete them. When a firm stops using PuraBIM, we delete its published files within 30 days of a request. Server logs are kept only as long as needed to run and secure the service. Project data in Notion stays under the control of the workspace that holds it.

Your choices and rights

You can ask us to show, correct, export or delete the personal information we hold about you by writing to privacy@pur4studios.com, and we answer within 30 days. If your information sits in a Notion workspace, the owner of that workspace controls it, and we will point you to the right person. People in the European Union and the United Kingdom also have the rights the GDPR gives them, including the right to object and to complain to their data protection authority. We rely on our agreement with your firm and our legitimate interest in running a secure service as the legal bases for this processing.

California residents

California residents can ask what personal information we collect, use and disclose, and ask us to delete or correct it, by writing to the address above. We collect the identifiers, account details and usage data described in this policy, for the purposes it describes, and answer within 45 days. We will not treat you differently for asking. We do not sell or share personal information for cross-context behavioral advertising. Because nothing here tracks you across sites, a Do Not Track signal changes nothing.

Children

The PuraBIM app is for professional use and is not meant for anyone under 16. If you believe a child has given us personal information, write to us and we will delete it.

Security

All traffic to and from the website and the app travels over HTTPS. Share links and sessions are signed, and session cookies are hidden from page scripts. No system is perfectly secure, so we also limit what we keep.

Changes

When this policy changes, the date at the top changes too. For important changes, we will also let you know in the app or by email before they take effect where we can.

Contact

PUR4 Studios LLC. Privacy questions and requests: privacy@pur4studios.com.