Legal

Privacy Policy

Last updated: October 2, 2026

This Privacy Policy explains how AXONTARA Kft. processes personal data when you visit click2bim.com, sign in, upload files, purchase services, or communicate with us about Click2BIM.

1. Controller

The controller for personal data processed through Click2BIM is AXONTARA Korlátolt Felelősségű Társaság ("AXONTARA Kft."), registered seat 8256 Salföld, Kossuth utca 41., Hungary; company registration number Cg. 19-09-525841, maintained by the Court of Registration of the Veszprém Tribunal; tax number 33087719-2-19; EU VAT number HU33087719.

For privacy requests, including any of the rights described in section 10, contact us at privacy@axontara.com.

2. Personal data we process

Depending on how you use Click2BIM, we may process account data such as name, email address, organisation, authentication identifiers, and account status; billing data such as customer identifiers, subscription status, invoices, VAT or tax information where needed, and payment records; project data such as uploaded file names, file metadata, project references, processing status, generated deliverables, and download records; technical data such as IP address, device and browser information, logs, security events, and approximate usage timestamps; and communications data when you contact us.

3. Purposes and legal bases

We process personal data for the purposes below, each on the legal basis shown.

Providing accounts, authentication, uploads, processing, and downloads — performance of our contract with you, or steps taken at your request before entering into one.
Billing, invoicing, tax, and accounting — compliance with our legal obligations, and performance of our contract with you.
Support and service communications — performance of our contract with you, and our legitimate interest in answering the people who contact us.
Security, fraud prevention, abuse investigation, and service monitoring — our legitimate interest in keeping Click2BIM and its customers safe, and compliance with our legal obligations.
Troubleshooting and improving the service — our legitimate interest in operating a reliable service.
Improving the accuracy and reliability of our processing using uploaded files in anonymised form — our legitimate interest in improving Click2BIM. Identifying information is removed before any file is used this way, as described in section 4, and you may object as described in section 10.
Website statistics, and guided-registration journey analytics — your consent, given and withdrawn separately for each as described in sections 8 and 8A.
Establishing, exercising, or defending legal claims — our legitimate interest in protecting our rights, and compliance with our legal obligations.

Where we rely on legitimate interests, we weigh them against your rights and freedoms, and you may object as described in section 10.

4. Uploaded files

Uploaded point-cloud files and generated deliverables may contain information that can be linked to a customer, site, building, or project. We process these files to provide Click2BIM and to operate, secure, troubleshoot, and improve the service. You are responsible for ensuring that you have the right to provide uploaded content to us for processing.

We also use uploaded point-cloud files, and the deliverables generated from them, to test and improve the accuracy and reliability of our processing. We do this only in anonymised form: information that identifies you, your organisation, your project, or the client is removed first, and nothing identifying you or your project is retained for this purpose.

5. Service providers and recipients

We use trusted service providers, acting as our processors, to operate Click2BIM. We share personal data only as needed for the purposes described in this policy, to comply with law, or to protect rights and security. The providers we use, grouped by what they do, are:

Hosting, file storage, and security — Cloudflare (website and application hosting, storage of uploaded files and deliverables, message queues, and bot protection) and Amazon Web Services (the compute that processes uploaded point clouds, together with its queues, logging, and monitoring).
Accounts and database — Supabase (sign-in and our account and project database).
Payments — Revolut, which collects card payments for purchased models. It will be enabled when paid purchases open; until then no payment data is shared with it.
Invoicing — Billingo, which issues our invoices and receives the billing name, address, and tax number on them. It will be enabled together with payments.
Email — Resend, which sends our service emails such as the notice that your model is ready.
Operational workflow — monday.com, where we track accounts, projects, and payments so that we can support you.
Website statistics — Google Analytics 4 through Google Tag Manager, only with your consent, as described in section 8.

We update this list when we add or replace a provider.

6. International transfers

Some providers may process data outside Hungary or the European Economic Area. Where required, we use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or equivalent contractual and technical measures. You may request a copy of the safeguards we rely on using the contact details in section 1.

7. Retention

We keep personal data only for as long as needed for the purposes described above. Account and project records are kept while the account is active and for a reasonable period afterwards. Billing, tax, and accounting records are retained for the periods required by law. Security logs and temporary technical records are generally kept for shorter periods unless needed to investigate abuse, incidents, or legal claims. Uploaded files and deliverables may be deleted or made unavailable after the retention period shown in the service or agreed with the customer. Material from which identifying information has been removed, as described in section 4, may be kept after that period to improve the service.

8. Cookies and local storage

Strictly necessary storage. Authentication storage, security checks, upload state, and a signed guided-registration session cookie keep the website and your account working. These are required to provide the service you asked for and are not subject to consent. Funnel questionnaire answers are registration data needed to resume and complete onboarding.

Beyond those, there are two optional and entirely separate kinds of measurement. Both are off unless you choose otherwise, neither is required to use the site or to register, and accepting one never enables the other.

(a) Website statistics. With your consent, Google Analytics 4, loaded through Google Tag Manager, tells us how many people visit click2bim.com, which pages they read, roughly where the visit came from, and whether it ended in a registration. It measures the visit, not the person: we send Google no name, company, email, phone number, account identifier, uploaded file, or questionnaire answer. No Google script is requested and no analytics cookie is set before you accept. This runs only on click2bim.com and is not enabled on our beta or internal environments. Google processes this data as our processor and may do so outside the European Economic Area, subject to the safeguards described in section 6.

(b) Guided-registration journey analytics. Separately, inside the guided registration journey, you may tick an optional box allowing us to record your progress through that journey and the campaign that referred you. Unlike (a), this is first-party only — it stays in our own database, is linked to your registration session and later to your account, and is never sent to Google or any other third party. Section 8A covers its retention and withdrawal.

We use no third-party advertising or remarketing cookies or pixels of any kind.

Your choice for (a) is stored on your device. You can change it at any time, with the same single click that gave it:

8A. Guided-registration retention and consent

Anonymous guided-registration sessions are deleted after 30 days of abandonment. Raw consented journey events are deleted after 13 months. When a funnel is linked to an account, its questionnaire data follows the account lifecycle. Withdrawing journey analytics consent deletes the funnel's optional events and campaign attribution while retaining registration answers, account links, promotions, billing, and usage records needed to provide the service or meet legal obligations. It can be withdrawn in the funnel footer or the signed-in account surface. This control covers the first-party journey analytics in section 8(b) only; the website statistics in section 8(a) are accepted and withdrawn separately, using the control in that section.

9. Security

We use technical and organisational measures intended to protect personal data, including access controls, encrypted transport, secure authentication, limited administrative access, and operational monitoring. No online service can be guaranteed to be completely secure.

10. Your GDPR rights

Under the GDPR, you may have the right to be informed, access your personal data, request correction, request deletion, restrict processing, receive data portability, object to processing, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. These rights may be limited in some cases, for example where retention is required by law or where we need data to establish, exercise, or defend legal claims.

To exercise any of these rights, contact us using the details in section 1. We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, and we do not carry out profiling of that kind. Automated processing of uploaded point-cloud files produces BIM deliverables; it makes no decisions about you.

11. Supervisory authority

You may lodge a complaint with your local data protection authority. In Hungary, the supervisory authority is the National Authority for Data Protection and Freedom of Information (NAIH), Falk Miksa utca 9-11, 1055 Budapest, Hungary, naih.hu.

12. Changes

We may update this Privacy Policy when the service, legal requirements, or our processing activities change. The latest version will be published on this page.