This Privacy Policy explains how OptiBIM ("we", "us", "our"), operated under the OPTIBIM brand and accessible at optibim.in, collects, uses, and protects information when you use our structural engineering design, analysis, and audit platform ("Platform"). By creating an account or using the Platform, you agree to the practices described here.
01 Data We Collect
We collect only what's needed to operate your account, run your structural calculations, and process payments.
We never see or store your raw payment card or UPI credentials. Razorpay, a PCI-DSS compliant payment processor, handles that directly — our servers only receive a payment status and a masked payment method label.
02 How We Use Your Data
- aTo create and maintain your account, and authenticate your sessions.
- bTo run the structural analysis, design, and audit calculations you request, and store your project history so you can return to it.
- cTo process subscription payments, enforce plan limits, and manage billing (invoices, renewals, cancellations, trial eligibility).
- dTo send essential account and billing communications — e.g. trial expiry notices, payment confirmations, or service updates.
- eTo maintain platform security, detect abuse, and debug technical issues.
- fTo improve the Platform's features and reliability based on aggregate, non-identifying usage patterns.
- gTo respond to messages you send us through the contact form, in-app feedback widget, support requests, or enterprise sales enquiries, and to prevent spam/abuse of those forms.
We do not sell your personal data, and we do not use your engineering project data to train external models or share it with third parties for marketing purposes.
03 Third-Party Processors
We rely on the following trusted providers to operate the Platform. Each processes a limited slice of your data strictly to perform its function:
- aClerk — handles account authentication, login sessions, and OTP verification. See Clerk's Privacy Policy.
- bRazorpay — handles subscription billing and secure payment processing. See Razorpay's Privacy Policy.
- cResend — handles transactional email deliveries and support notifications. See Resend's Privacy Policy.
- dCloudflare Turnstile — handles bot-verification and spam prevention on our public forms. See Cloudflare's Privacy Policy.
- eAmazon Web Services (AWS) — hosts our core application server and database infrastructure. See AWS's Privacy Notice.
We do not permit these providers to use your data for any purpose beyond delivering their service to us.
04 Cookies & Sessions
The Platform uses essential session cookies, set by Clerk, solely to keep you signed in and to secure your account session. Our contact page also loads Cloudflare Turnstile, which may set its own cookies as part of verifying you're not a bot. We do not use third-party advertising or cross-site tracking cookies.
05 Data Retention
We retain your account and project data for as long as your account remains active. If you delete your account, your personal identity data is removed from our active systems within a reasonable period, except where we are required to retain billing records for accounting or legal purposes under Indian law. Contact form, feedback, support, and enterprise enquiry submissions are retained for as long as needed to respond to you and for a reasonable period afterward for internal record-keeping.
06 Data Security
- aAll data in transit between your browser and our servers is encrypted via HTTPS/TLS.
- bAuthentication and password handling are delegated entirely to Clerk's secure infrastructure — we never store raw passwords.
- cAccess to production data is restricted to what's operationally necessary to run the Platform.
- dNo system is perfectly secure; if we become aware of a data breach affecting your personal information, we will notify affected users as required by applicable law.
07 Your Rights
Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact us using the details below — we'll respond within a reasonable timeframe.
- aAccess & correction: request a copy of the personal data we hold about you, or ask us to correct inaccuracies.
- bDeletion: request deletion of your account and associated personal data, subject to legal/accounting retention requirements.
- cWithdrawal of consent: where processing is based on consent, you may withdraw it at any time.
08 Children's Privacy
The Platform is intended for professional and student engineering use and is not directed at children under 18. We do not knowingly collect personal data from children.
09 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
10 Contact Us
If you have questions about this Privacy Policy or how your data is handled, reach out at hello@optibim.in, or visit our Contact page. This Privacy Policy is governed by the laws of India, with courts in Kolkata, West Bengal holding exclusive jurisdiction — consistent with our Terms of Service.