Privacy Policy

Introduction

This Privacy Policy applies to PIComposer Basic Edition ("PIComposer", "we", "us", or "our"), a professional BIM/PMI data management service provided by Procedural Information System, LLC ("Procedural Information System", "the Company"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

We collect the following information to provide and improve our service:

• Email address - Required for account registration and authentication
• Name - Optional information you provide
• Subscription and payment data - Processed securely through our payment provider (Stripe)
• Usage data - Information about how you interact with our service
• Technical information - IP address, browser type, operating system, and access times collected through standard server logs
• Communication data - Information you provide when contacting our support team

How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our service
• Process payments through Stripe
• Manage your account and subscription
• Send service-related announcements (e.g., payment confirmations, policy updates) - these are not promotional
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve security and performance

Legal Basis for Processing (for users in the EEA): We process your personal data based on one or more of the following legal grounds: performance of a contract (to provide our service), legitimate interests (to improve security and user experience), and compliance with legal obligations.

Data Storage and Security

Your information is stored in a secure cloud database with appropriate technical and organizational security measures. Specifically, we implement:

• Encryption in transit - TLS encryption for data transmitted between your browser and our servers
• Encryption at rest - Encrypted storage for all stored data
• Access controls - Restricted access to authorized personnel only

Third-Party Services

We use trusted third-party services to operate our business. These third parties are contractually obligated to protect your data and may not use it for any purpose other than providing services to us.

• Stripe - Secure payment processing. Stripe handles all payment data in accordance with PCI (Payment Card Industry) standards. We do not store your credit card information.
• PocketHost - Our hosting infrastructure provider. PocketHost runs our PocketBase instance in secure, isolated Docker containers. PocketHost only collects information about us (the account owner) and does not have access to your data as our customer. Your information remains within our dedicated PocketBase instance hosted on PocketHost's infrastructure.

Note: PocketHost serves as our infrastructure provider and does not process your personal data directly. All user data is stored and processed within our private PocketBase instance hosted on PocketHost's secure infrastructure.

Data Retention

If you cancel your subscription, we will retain your personal data (including email, name, and subscription records) for 30 days. This retention period allows for subscription renewal or data recovery if cancellation was unintentional. After this 30-day period, your data will be permanently deleted from our systems, unless we are required to retain it by applicable law.

You may request earlier deletion of your data at any time by contacting us at [email protected].

Cookies and Tracking

Our website does not use persistent tracking cookies for analytics or advertising. However, a temporary session identifier may be used to maintain your login state while using the service. This session cookie is strictly necessary for functionality, is not used for tracking, and is deleted when you close your browser.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access - Request a copy of the personal information we hold about you
• Correction - Request correction of inaccurate or incomplete data
• Deletion - Request deletion of your data (subject to our retention policy)
• Portability - Request a machine-readable copy of your data to transfer to another service
• Objection - Object to certain processing activities based on legitimate interests
• Withdraw consent - Withdraw any consent you have provided (where applicable)

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

For users in the European Economic Area (EEA): You have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can address your concerns directly.

Children's Privacy

Our service is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately at [email protected], and we will take steps to delete that information.

International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and service providers (including Stripe and PocketHost) are located. Data protection laws in the United States may differ from those in your country. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data when it is transferred internationally.

Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us:

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Any changes will be posted on this page with an updated "Last Updated" date. For significant changes, we will provide additional notice (such as an email notification or a notice on our website). We encourage you to review this Privacy Policy periodically.