Privacy
Last updated: September 3, 2026
Beta service. MeshBIM is under active development: features may change and availability is not guaranteed. Interruptions and loss of stored data, while not expected, cannot be ruled out at this stage — keep exported copies of any work that matters to you.
This policy explains what data we collect, why, and your rights over it. It is written with the Brazilian General Data Protection Law (LGPD) and similar regimes in mind.
1. Who is responsible
MeshBIM is the controller of the personal data described here. For any question about this policy, or to exercise the rights listed below, contact us at suporte@meshbim.com.br.
2. Data we collect
Account data you provide: name, email address and, optionally, phone, company and address. Billing data, collected and processed by our payment processor — we receive subscription status and invoice records, never full card details. The project content you create or upload. And technical data generated by using the service: IP address, timestamps, browser and device information, and error and performance records needed to operate and secure the platform.
3. Why we process it, and on what basis
To review and decide on your registration request, which during the beta period is approved individually before an account is activated (steps prior to entering into a contract, at your request); to provide and maintain the service and to run your subscription (performance of a contract); to keep accounts and the platform secure, prevent abuse and fix faults (legitimate interest); to comply with accounting, tax and other legal duties (legal obligation); and to send you communications about your account. We do not sell your personal data and we do not use your project content to build advertising profiles.
4. Your project content
Project content is processed to deliver exactly what you ask of the service — computing, saving, exporting and sending your projects. Cloud-stored projects are held in private storage reachable only through authorized credentials. Our team accesses project content only when strictly necessary to provide support you have requested, to investigate a security incident, or to comply with a legal obligation.
5. Sharing and processors
We share personal data only with providers that process it on our instructions and under contract: hosting, database and file-storage infrastructure; Stripe, for payment processing and subscription management; and Resend, for transactional email such as account confirmation and password reset. Data may also be disclosed to comply with a legal or regulatory obligation, or to protect rights and the security of the service.
6. International transfers
Our application servers are hosted in Brazil. Some processors, including the payment and email providers named above, operate abroad, so certain data is transferred internationally with the safeguards required by the LGPD.
7. Retention
A registration that is awaiting approval holds only the address and credentials you submitted; if it is not approved, it is deleted along with them, and nothing else about the request is kept beyond a minimal record of the decision. We keep account data while your account is active. Project versions are retained on a thinning schedule — dense for recent saves, sparser as they age, up to a limited window. After your account is deleted, personal data and project content are erased within a reasonable period, except records we are required to keep for legal, tax or security reasons, which are retained for the applicable statutory period and then deleted or anonymized.
8. Security and the beta period
We apply technical and organizational measures appropriate to the service, including encrypted transport, authentication through a session cookie restricted to our domain, and access controls over stored content. No system is completely secure, and while the service is in beta we cannot guarantee availability or the absence of data loss: keep your own exported copies of work that matters to you. If a security incident occurs that presents a relevant risk, we will notify affected users and the National Data Protection Authority (ANPD) as required by law.
9. Your rights
Under the LGPD you may confirm whether we process your data and access it; correct incomplete or outdated data; request anonymization, blocking or deletion of data processed unnecessarily; request portability; be informed about with whom we share your data; and withdraw consent where processing is based on it. Write to us at the address in section 1 — we may need to confirm your identity before acting. You may also lodge a complaint with the ANPD.
10. Cookies and local storage
We use an essential cookie for authentication and session security; it is scoped to our domain so your login is shared between the website and the editor. We also use your browser’s local storage for preferences such as language and, on plans that store projects locally, for the project data itself, which stays on your device. We do not use advertising cookies or third-party tracking.
11. Children
The service is intended for professional use and is not directed at children or adolescents. We do not knowingly collect personal data from anyone under 18.
12. Changes to this policy
We may update this policy as the service evolves. Material changes will be communicated, and the effective date at the top of this page always reflects the current version.