PlanFinder – Privacy Policy (GDPR)
Applies to: planfinder.xyz website and the PlanFinder Revit plugin (including cloud-based Generate and licensing services).

 

1. Controller

Controller (data controller) under the GDPR:
PlanFinder
Address: Dr. Claas Noorduijnstraat 9A-28, 6541 PM Nijmegen, The Netherlands
Contact: contact@planfinder.xyz

​

2. Data protection contact

For privacy-related requests (access, deletion, questions), contact: contact@planfinder.xyz.
If you need an individual contact person for procurement, you may also use: jeroen@planfinder.xyz.

​

3. Overview of processing activities

Website (planfinder.xyz)

• Data processed: Server logs (e.g., IP address, user agent, time of request).

• Purpose: Website delivery, security, abuse prevention.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

• Storage / retention: Retention configured in the hosting environment; kept only as long as necessary for security and operations.

Generate (cloud-based)

• Data processed: Geometry-only payload converted into PlanFinder’s internal plain geometry format (boundary polygon + façade geometry + entrance geometry), plus user-selected generation preferences such as preferred room counts. No BIM parameters/metadata transmitted.

• Purpose: Compute and return layout alternatives based on the provided geometry and preferences.

• Legal basis: Art. 6(1)(b) GDPR (contract).

• Storage / retention: No persistent storage of payload. Processed transiently in AWS Lambda; technical logs may exist (see section 6).

Licensing

• Data processed: Email address, company name, machine identifier.

• Purpose: License issuance, validation, renewals, fraud prevention.

• Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(f) GDPR (legitimate interests).

• Storage / retention: Stored in AWS RDS. Retention: for the term of the license + a limited period for support/accounting, unless deletion is required earlier.

Payments

• Data processed: Payment and invoicing data processed by Stripe (e.g., billing details, payment method tokens; PlanFinder may receive limited billing metadata).

• Purpose: Process payments and manage subscriptions.

• Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (legal obligations).

• Storage / retention: Stripe retention per their policies; PlanFinder retains invoices per legal retention requirements.

​

4. Cloud processing (AWS)

The Generate service and licensing backend run on Amazon Web Services (AWS) in the EU region eu-central-1 (Frankfurt).
For Generate, the Revit plugin extracts the required geometry, converts it into PlanFinder’s internal plain geometry format, and transmits it together with selected generation preferences (e.g., preferred room counts).
No BIM parameters, metadata, or other non-geometric model information are transmitted as part of the Generate payload.

​

5. Sub-processors

• Amazon Web Services (AWS) – compute (Lambda), database hosting (RDS), logging (CloudWatch), region: eu-central-1 (Frankfurt).

• Stripe – payment processing and subscription management.

​

6. Logging and retention

Operational logs are used for stability, troubleshooting, and security. AWS CloudWatch may store technical request logs.
Log retention is configured in AWS and can be adjusted per environment. Where feasible, application logging avoids storing request payload contents.

​

7. International transfers

AWS services are configured for EU-region processing (Frankfurt). Stripe is an international provider; processing may involve transfers outside the EU/EEA. Where required, such transfers rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and additional measures provided by Stripe.

​

8. Data subject rights

You have the right to:

• Access (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Object (Art. 21 GDPR)

• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

​

9. Contact and requests

Requests can be sent to contact@planfinder.xyz.