Privacy Policy – NeoTera Labs

Last updated: July 26, 2026 · Company: NeoTera Labs · Contact: info@neoteralabs.com

1) Overview

NeoTera Labs develops Plinth AEC Solutions, a unified Autodesk Revit automation platform. To provide licensing, activation, fraud prevention, and support, our software requires periodic internet connectivity to communicate with our secure servers. We collect only the data needed to operate subscriptions and protect intellectual property.

2) Who is the controller

NeoTera Labs is the data controller for personal data processed in connection with Plinth AEC Solutions licensing, subscriptions, and support.

3) Subscriptions & plans

We offer the following subscription tiers (prices in USD):

Plinth Starter — full finish modeling plus architectural coordination at $14.99 / month or $149.99 / year.
Plinth Pro — full platform at $39.99 / month or $419.99 / year. One license key.
Enterprise — full Pro platform plus BimBot & BimBoard Connect & Share at $69.99 / month or $749.99 / year.

Free trials may be offered for eligible products. Trial eligibility, duration, and abuse-prevention rules are enforced server-side.

4) What data we process

A. Data you provide

Email address (entered during license activation or trial start)
License key (for paid activation)
Support messages you send us (if any)

B. Technical data

Machine identifier (hardware fingerprint used for license binding)
Activation and validation metadata (success/failure, timestamps)
Server communication logs (IP addresses and timestamps during license checks)
Product code and subscription scope (which add-in or bundle is activated)

C. Local app data (stored on your computer)

Encrypted local license file
Trial anchor data (for trial abuse prevention)
Local add-in settings files
Path A — Plinth AI API key (optional): if you enter your own Anthropic API key, it is stored only on your computer under %AppData%\Plinth\ in an encrypted local file (ai.dat), protected with Windows DPAPI for the current Windows user. The key is never written to disk in plain text and is never sent to NeoTera Labs. It is sent only from your computer directly to Anthropic over HTTPS when you use Path A.
Path B MCP (Claude Desktop / Cursor): optional local connector on 127.0.0.1 (loopback). Tool traffic stays on your computer between Revit and the MCP client. Plinth does not require, store, or transmit an Anthropic API key for this path, and NeoTera Labs does not receive one.

D. Image-to-BIM (AI + MCP)

When you deliberately start Image-to-BIM through Path A, the image or sketch you attach, your prompt, and the required workflow context are sent directly from your computer to Anthropic over HTTPS for AI processing.
With Path B, Plinth exposes Image-to-BIM tools over local loopback. Image handling by Claude Desktop, Cursor, or another MCP client is governed by that client and its AI provider.
NeoTera Labs does not persistently store Image-to-BIM source images, prompts, or generated Revit geometry. Generated geometry is written locally into the active Revit document.

Note: Image-to-BIM is an experimental beta feature. Use with caution in production environments.

E. BimBot (Enterprise — WhatsApp agent routing)

Bring Your Own Key (BYOK): BimBot WhatsApp integration requires you to supply and maintain your own Twilio account credentials (for example Account SID, Auth Token, and WhatsApp-enabled sender identity). You alone control that Twilio account, configure messaging compliance (including WhatsApp Business / Meta requirements), and pay all Twilio usage, messaging, and telecom fees. NeoTera Labs provides software infrastructure and routing only; we do not process, collect, or assume liability for Twilio invoices, account suspensions, carrier blocks, or WhatsApp/Meta policy enforcement.
When you connect BimBot and push a model snapshot, selected project metadata required for agent answers (for example rooms, openings, levels, and quantities you choose to share) is transmitted over HTTPS to our secured Connect & Share routing services so WhatsApp messages can be answered against that snapshot.
Twilio credentials and related secrets are stored using encrypted, access-controlled mechanisms. We do not persistently store your Twilio API keys or Auth Tokens on our public servers in plain text. Secrets are used only as needed to route WhatsApp traffic for your connected channel and are protected at rest and in transit.
Message content handled by Twilio is subject to Twilio's privacy and messaging policies. NeoTera Labs retains operational logs only as needed for security, abuse prevention, and service reliability.

F. BimBoard (Pro — Power BI & cloud share)

When you export or sync with BimBoard, Plinth generates a Power BI–oriented package on your machine (typically a 3D model asset such as GLB together with an Elements table/CSV derived from the active Revit document). You may keep that package locally and/or upload it to our secured cloud share endpoints so authorized viewers can open it in Power BI Desktop, the Power BI mobile experience, or a shareable link (including QR access where offered).
Uploaded share packages and share identifiers are processed on our infrastructure solely to deliver Connect & Share viewing. We do not sell model geometry. Retention follows share lifecycle controls and our general retention practices below.
Cloud API tokens or session credentials used for BimBoard sync are protected with encryption and are never persisted on public servers in plain text. Local export folders on your workstation remain under your control.
ACC Sync (Enterprise). Where your plan includes Autodesk Construction Cloud (ACC) synchronization, models you deliberately select for sync are retrieved from ACC using credentials you authorize (Bring Your Own Key / OAuth), converted into the same Power BI–oriented package format used by BimBoard, and stored on our secured cloud object storage and catalog endpoints solely so that you and authorized viewers in your organization can list and open those packages in Power BI and related NeoTera Connect & Share surfaces. Hosting is provided on industry-standard cloud infrastructure with encryption in transit (HTTPS) and encryption at rest for stored packages and sealed credentials. We do not use ACC-derived project content for advertising, model training for unrelated products, resale, or any purpose other than operating and securing the sync, listing, and viewing services you elected to use. You remain responsible for ACC project permissions, what you choose to sync, and Autodesk's applicable terms.

The add-ins do not upload whole RVT files or scan unrelated personal files. Only data deliberately provided for an AI request, a BimBot snapshot / WhatsApp routing session, a BimBoard export or cloud sync (including Enterprise ACC Sync of models you select), or the scoped geometry facts required by a selected cloud-assisted tool may be transmitted as described in this policy.

5) Why we process this data

Contract performance — to activate, validate, and deliver subscribed products
Legitimate interests — fraud prevention, machine binding, security, diagnostics
Legal obligations — where required by law

6) Payments and licensing providers

Lemon Squeezy (payment processing, orders, subscription infrastructure)
Cloudflare Worker/KV (secure license proxy, server-side validation and machine-binding storage)
Anthropic (optional Path A Plinth AI and Image-to-BIM processing initiated by the user)
Twilio (customer-owned BYOK account for Enterprise BimBot WhatsApp delivery — billed directly to the customer by Twilio)
Secure Connect & Share cloud endpoints (Enterprise BimBot routing and Pro+ BimBoard package hosting)

Payment card details are processed by Lemon Squeezy under their privacy policy. NeoTera Labs does not store full card details in the add-ins.

7) Data sharing

We do not sell personal data. We share data only with service providers required to operate the products, under contractual and technical safeguards.

8) International data transfers

Because our providers operate globally, data may be processed outside your country. We rely on provider safeguards and standard contractual mechanisms where required.

9) Data retention

We retain personal data only as long as necessary for licensing, subscription history, fraud prevention, legal compliance, and dispute handling. When no longer needed, data is deleted or anonymized where feasible.

10) Security

No payment-provider API secrets embedded in client add-ins
Server-side proxy validation
Encrypted local license storage (Windows DPAPI)
Optional Path A Plinth AI API keys encrypted locally with Windows DPAPI; transmitted only to Anthropic by the client over HTTPS, not to NeoTera Labs
Path B MCP for Claude Desktop and Cursor uses local loopback only — no NeoTera Labs key storage or transmission for that path
Enterprise BimBot Twilio credentials and BimBoard sync tokens are encrypted at rest and are never stored in plain text on public servers; WhatsApp and Power BI routing uses HTTPS

11) Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. Contact us to exercise these rights.

12) Children

Our products are intended for professional business use and are not directed at children.

13) Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above.

14) Contact

Questions about this policy: info@neoteralabs.com