Privacy policy

1. Data controller

Data controller

Juan Francisco Rodríguez del Rosario

Privacy contact

privacidad@vectoriacivil.com

Postal address

Calle Hoya del Rosario, 98, 35016 Las Palmas de Gran Canaria, Las Palmas, España

Vectoria Viewer and Vectoria Civil have the same owner. Full identification details are available in the Vectoria Civil legal notice.

2. What data we collect

For free access, we store your email address and registration dates, along with the version of the access information. If you choose to receive marketing communications, we also store the accepted text and version, date, consent method, source and campaign UTM parameters where available. We retain subscription and unsubscription events as evidence of your choices.

We verify your identity to create a user session and store the account identifier, verification status and access dates. We send a one-time code to verify your email address. If you choose Google, we receive your email address and basic profile data shared by Google to identify you, such as your name and picture. Viewer's contact list uses your email address; we do not request access to Gmail, Drive or your files.

Access uses a single Vectoria account managed with Supabase. Permissions and usage are associated with that account and your active product and plan. Sharing an account across products does not in itself grant a subscription. You can sign in with Google or with a code sent to your email address. The code expires after ten minutes, and only its cryptographic verification is stored, together with a necessary temporary cookie and your encrypted email address. We limit attempts and sends using cryptographic identifiers of the email and IP addresses.

The browser remembers the guided tour and stores your drafts and saved IFC sessions locally. During the session, it also remembers that the form has been completed and the incoming UTM parameters, so they can be associated with registration if you choose to subscribe. The session uses a necessary, first-party HttpOnly cookie that browser scripts cannot read. It expires seven days after sign-in, without being extended by use. The information needed to maintain the session is stored encrypted in Viewer's server database, hosted on Cloudflare D1, rather than in the browser's local storage. Google sign-in also uses a temporary five-minute security cookie. Signing out of Viewer invalidates this session without signing you out of Civil or Cost. Having an account does not upload or synchronise your IFC files.It does not include advertising analytics or cross-site tracking.

When usage measurement is enabled, we count visits, openings of the example or an IFC file, tool actions, exports and loading errors. Only action categories are sent: never the file, its name, path, contents or error text. The measurement session lives in tab memory, without analytics cookies or persistent identifiers. We record the general source of the visit and, where available, the campaign code; when you sign in, we may associate these actions with your account. We query events from the last 90 days; older events are deleted in batches as new activity arrives. The last observed access date is retained with the account. Do Not Track and Global Privacy Control signals are respected. A keyed cryptographic digest of the IP address is used temporarily to limit abuse; this measurement does not store the IP address in plain text.

Vector: choosing an agent

If you request beta access, we store your account identifier and request date to manage the invitation. Requesting access does not subscribe you to marketing communications or activate the agent automatically. This information is kept with your account; you can request its deletion through the privacy contact.

If you choose ChatGPT, you authorise OpenAI to use your ChatGPT account through Codex. Viewer does not receive your password. The remote connection uses a separate process for your session on Google Cloud in the Madrid region, with temporary credentials. Your request and limited tool results pass through the Viewer server to OpenAI. They may include element names, identifiers and properties; review what data you allow to be shared. The complete IFC file and its path remain on your device.

If you choose Vector, the server uses Vectoria's access to TensorX. Your request and limited tool results are sent to TensorX to run the DeepSeek model. They may include IFC names, identifiers and properties; the complete file and its path remain on your device. The provider and data use are shown before connecting. Clicking Connect Vector authorises this transfer to TensorX; choosing ChatGPT shows the corresponding OpenAI notice. The session history shows tokens, timings and an estimate of API cost. The provider key is not sent to the browser.

Authorisation and the server conversation are deleted when the connection closes or expires. If a network failure prevents us from receiving a disconnect request, the session is removed when the tab stops responding. There are also inactivity and overall duration limits. We do not store agent history in the contact database. We separately record usage permission, its expiry, the provider, operation dates, tokens and estimated cost, together with reserved and consumed credits and their reconciliation status. These records allow us to manage the balance and resolve issues without storing the IFC file or conversation in them.

The ChatGPT option is subject to your ChatGPT account's limits and terms. See the information provided by OpenAI and Google Cloud about their data processing. For the Vector agent, see the information provided by TensorX. You can disconnect Vector and continue using the free manual tools.

Pro image generation

Capturar, importar o preparar una vista desde Vector no la envía al proveedor. Cuando confirmas «Generar y descargar», enviamos únicamente la imagen de referencia y tus indicaciones a Google Cloud Vertex AI para producir el resultado. No se envían el archivo IFC, su ruta ni el conjunto de sus propiedades. El modelo de imágenes utiliza el servicio global de Vertex.

El resultado pasa por el servidor de Viewer durante la generación y se entrega al navegador para descargarlo en tu equipo. Vectoria no conserva una copia de la imagen, la referencia ni tus indicaciones en almacenamiento del servidor. La galería se guarda solo en este navegador. Si la entrega se interrumpe antes de recibir el PNG, no podemos recuperarlo desde el servidor. Registramos por separado la autorización de envío, los contadores de uso y los créditos reservados y consumidos para controlar el saldo y resolver incidencias. Los registros necesarios para conciliar consumos se tratan según el apartado de conservación.

Generation requires active Pro access and deducts the provider's actual usage from the same balance used by Vector. If a response remains unconfirmed, its reservation is retained while it is reconciled. See the information provided by Google Cloud about data processing.

Subscriptions, payments and credits

If you subscribe to Viewer Pro, Paddle handles payment and invoicing. We receive customer, transaction and subscription identifiers, the purchased offer, amounts, payment status and dates for the period, renewal, cancellation or refund. We link these to your account to grant the relevant access, allocate credits and address issues. Billing information entered at checkout is processed by Paddle; Vectoria does not store your full card number or security code.

Supabase stores the central account and permission, payment and usage records. Cloudflare stores the Viewer web session and its encrypted credentials. These records are separate from the contents of your local models.

Read Paddle's privacy policy and the Viewer terms. Subscribing to Pro and choosing to receive marketing communications are independent decisions.

3. Purpose and legal basis

We use your registration email address to manage activation of the free Vectoria Viewer access you request. This processing is connected to providing that service. If you tick the optional box, we also use your email address to send BIM resources, news and offers from Vectoria Viewer and other Vectoria BIM products, based on your consent. You can use your IFC files without accepting these communications and unsubscribe without losing access. We do not use this data for profiling or automated decision-making.

Managing the subscription, permissions and credit balance is necessary to provide the purchased service. Billing data is also retained where required by applicable legal obligations. Security controls and review of payment or usage issues protect accounts and the operation of the service.

4. Recipients and transfers

We do not sell your personal data.Cloudflare hosts the site and Viewer sessions. Supabase manages authentication, the central account and records of permissions, consent, payments and credits. Google provides identification when you choose that sign-in method. Brevo delivers email sign-in codes and receives your email address and the message required to do so. Paddle processes the data needed for purchases. Google Cloud runs the agent backend; OpenAI or TensorX receive the limited data explained above, depending on the connection you choose.These providers will process only the necessary data and may involve international transfers subject to the applicable safeguards.

Provider information: Cloudflare and Supabase and Brevo. When you choose to sign in with Google, its privacy policy.

5. Retention

We retain your registration to manage your free access; you can request its deletion using the privacy contact. Your subscription to marketing communications remains active while your consent is valid. After you unsubscribe, we retain only the minimum evidence needed to record the withdrawal and prevent further messages, unless a legal obligation or the defence of claims requires longer retention.

Account and paid subscription data are retained for the duration of the contractual relationship. Records needed to establish payments, access rights and usage, handle claims and meet legal obligations may be retained for the applicable periods after the relationship ends. Unsubscribing from communications does not cancel your Pro subscription; you can manage each choice separately.

6. Your rights

You can request access, rectification, erasure, objection, restriction or portability, and withdraw your consent by writing toprivacidad@vectoriacivil.com. Each marketing communication must also include a simple, free way to unsubscribe. You can also lodge a complaint with the Spanish Data Protection Agency.

7. Security and minors

We apply access controls, data minimisation and encryption in transit. The form is not intended for anyone under 18, and we do not knowingly collect their data.

8. Changes

If the purpose of processing or the way we use data changes, we will update this policy and request new consent where necessary.