Privacy Policy

Last updated: 2026-05-06 (DRAFT — placeholder)

⚠️ This page is a draft. It will be replaced with finalized text at BuildMate Phase 1 launch (when telemetry / Capability Gap reporting go live).

1. Data we collect

1-1. Usage telemetry (Aptabase)

Collected only when the user opts in to "send anonymous usage statistics":

• InstallationId (random UUID — cannot identify the user)
• OS version / Revit version / locale (ko / en) / add-in version
• Building-block call counts by category (e.g. "query", "element" buckets — not individual IDs)
• Plan success / failure / cancel counts
• .rcmd export / import counts

1-2. Capability Gap report (explicit per-event consent)

Collected only when the user clicks "Didn't work" / "Helpful" and confirms the transmit-preview dialog:

• InstallationId (issued separately from the telemetry ID — cannot be cross-correlated)
• The natural-language request (verbatim) and its normalized-intent form
• Building-block IDs used / estimated missing capability
• Revit version / locale / add-in version
• (Optional) free-form user comment

2. What we don't collect

• Model file paths / Element IDs / parameter values
• BYOK API keys (stored DPAPI-encrypted on the user's PC only; never transmitted)
• Anthropic API response bodies
• Sandbox snippet source code
• .rcmd file contents / user-authored fields
• GitHub account / email / IP address

3. Data retention

• 0–90 days (Active): normal retention, analytics-available
• 90 days – 12 months (Cold): cold storage, limited sort / search
• 12–24 months (Anonymization): additional anonymization
• 24+ months: permanently deleted

4. Your rights

Email your InstallationId to [email protected] and we permanently delete all data tied to that ID within a 14-day SLA.

5. Opt-out

Open the BuildMate [Settings] dialog or first-run wizard and disable the opt-in — all transmission stops immediately.

6. Contact

Questions about this policy: [email protected].