AIBIMTool
Start Free Now

Privacy Policy

Last Updated: October 2026

1. Introduction

AIBIMTool, operated by MeltFlex s.r.o. (“AIBIMTool”, “We”, “Us”, “Our”), is committed to protecting Your privacy. This Privacy Policy explains how We collect, use, store, and protect Your personal information when You use our AI building design platform at aibimtool.com (the “Platform”).

By using our Platform, You agree to the collection and use of information in accordance with this Privacy Policy. If You do not agree, please do not use the Platform.

2. Data Controller

The data controller responsible for Your personal data is:

MeltFlex s.r.o.

Bratislava, Slovak Republic

Email: info@aibimtool.com

MeltFlex s.r.o. is subject to the General Data Protection Regulation (GDPR) as a company established in the European Union.

3. Information We Collect

3.1 Information You Provide Directly:

  • Email address, name and profile picture (from Your Google account when You sign in)
  • Payment information (processed securely by Stripe; We do not store Your card details)
  • Prompts, briefs, room programs and site information You give the AI agent
  • Projects You create on the Platform: the conversation with the agent, the BIM model (IFC file) and a preview image of it
  • Communications You send to us (support requests, feedback)

3.2 Information Collected Automatically:

  • Device information (browser type, operating system, screen resolution)
  • IP address and approximate geographic location
  • Pages visited, features used, and actions taken on the Platform
  • Referral source (how You found our Platform)
  • Cookies that keep You signed in and protect the free plan. We use only cookies that are strictly necessary for the Platform to work, and no analytics or advertising cookies; see our Cookie Policy.

4. How We Use Your Information

We use Your personal data for the following purposes:

  • Providing the Service: To create and manage Your account, process Your prompts through our AI agent, build Your BIM models, and save Your projects
  • Plan and Credit Management: To process payments, track credit use, and provide access to paid features
  • Platform Improvement: To identify bugs and improve features, using aggregated usage counts and error logs rather than Your prompts or models
  • Communication: To respond to Your support requests and send essential service notifications (e.g., payment confirmations)
  • Legal Compliance: To comply with applicable laws, regulations, and legal obligations

We do not use Your personal data for automated decision-making or profiling that produces legal effects.

5. Legal Basis for Processing (GDPR)

We process Your personal data on the following legal bases:

  • Contract Performance: Processing necessary to provide You with the Platform and fulfill our agreement with You
  • Legitimate Interest: Analytics and Platform improvement, fraud prevention, and security
  • Consent: Marketing communications (where applicable, and only with Your explicit consent)
  • Legal Obligation: Retaining financial records as required by Slovak and EU law

6. AI-Generated Models and Your Prompts

When You describe a building, our AI agent reads Your prompt and the current state of Your project, then writes and runs modelling code that builds the BIM model. That code runs in an isolated environment created for Your project, with no access to the internet or to other users' projects. Your conversation, model and preview are stored in private, per-account storage so that You can come back to Your projects.

We do not use Your prompts, briefs or models to train or improve AI models, and We do not provide them to third parties for that purpose. Our AI provider processes them only to answer Your request and does not use them for training.

AI-generated models are provided as a starting point for Your design work. They must be reviewed by a qualified architect or engineer before being used for permits, construction, or any safety-critical purpose.

7. Data Sharing and Third-Party Processors

We do not sell Your personal data. We share Your data only with the following third-party service providers who process data on our behalf:

  • Supabase (sign-in, account database and the private storage holding Your projects)
  • Google (Google sign-in; receives no prompts or models)
  • Anthropic (the AI model behind the agent, which reads Your prompts and project to build the model)
  • Vercel (website hosting and the isolated environment that builds Your models)
  • Stripe (payment processing; receives no prompts or models)

Each processor is bound by data processing agreements and processes data only as instructed by Us. We ensure all processors provide adequate data protection.

8. International Data Transfers

Some of our third-party processors operate outside the European Economic Area (EEA). Where data is transferred outside the EEA, We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions.

9. Data Security

We implement appropriate technical and organizational security measures to protect Your personal data, including:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Secure authentication with session management
  • Projects visible only to Your account, and model-building code isolated per project
  • Access controls limiting data access to authorized personnel
  • Regular security reviews and monitoring

While We strive to protect Your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. Data Retention

  • Account data: Retained while Your account is active. Deleted within 30 days of account deletion request.
  • Projects (conversations, models and previews): Retained while Your account is active. Deleted when You delete a project or Your account.
  • Payment records: Retained for up to 10 years as required by Slovak tax and accounting law.
  • Server and error logs: Retained for up to 24 months, then deleted.
  • Support communications: Retained for up to 24 months after resolution.

11. Your Rights Under GDPR

As a data subject, You have the following rights:

  • Right of Access: Request a copy of the personal data We hold about You
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of Your personal data (“right to be forgotten”)
  • Right to Restrict Processing: Request that We limit how We use Your data
  • Right to Data Portability: Receive Your data in a structured, machine-readable format, including Your models as IFC files
  • Right to Object: Object to processing based on legitimate interest
  • Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@aibimtool.com. We will respond within 30 days. You also have the right to lodge a complaint with Your local data protection authority. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

12. Children's Privacy

Our Platform is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If We become aware that We have collected data from a child under 16, We will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. Continued use of the Platform after changes constitutes acceptance of the revised policy.

14. Contact Us

If You have any questions about this Privacy Policy or how We handle Your data, please contact us:

Email: info@aibimtool.com

MeltFlex s.r.o.

Bratislava, Slovak Republic