Who we are
SimpleStruct ("SimpleStruct," "we," "us") publishes the ConstructiVision software products, including the AutoCAD plugin (cv-cad) and the web application (cv-web), and operates simplestruct.com. This policy explains what information we collect when you use those products and the website, and what we do with it.
Information we collect
Account information
When you create an account, we collect the email address, display name, and profile photo URL associated with the sign-in method you choose. We support sign-in via Google, Apple, LinkedIn, Dropbox, and Autodesk, as well as direct email and password. For OAuth sign-ins, the provider gives us only what you authorize them to share; we do not receive your password.
Mobile phone number and text-message consent
If you give us a mobile phone number and agree to receive text messages (SMS) from SimpleStruct, we collect that phone number, the date, time and method of your consent, and your later opt-out or help requests. See Text messages (SMS) below.
Project and design data
Project files you create, save, or open inside ConstructiVision contain panel geometry, materials selections, dimensions, and other design content. When you save a project to the cloud or share it with collaborators, that file is stored on our infrastructure.
Project backups
Unless your organization turns it off, every time you save a project in ConstructiVision-CAD we upload a copy of that project's file (.cvp) to SimpleStruct. The project file includes the drawing licences (signed licence tokens) your organization holds for the drawings in that project. ConstructiVision Web saves your projects to the cloud the same way while you are signed in.
- Why: so we can recover your project and its drawing licences if your computer is lost or a file is damaged, and to keep track of which drawings your organization has licensed.
- What we record with each save: who saved it, from which workstation, when, and the size and checksum of the file.
- One copy per project: each save replaces the project's previous backup. A replaced copy is kept for 30 days, then deleted.
- Protection: backups are encrypted so that only SimpleStruct can read them, and are stored separately from everything else. The upload accepts new copies only: it cannot read, list or delete anything. No one can download a backup from our website or apps.
- Diagnosing a problem you report: SimpleStruct support opens your backups for this only if an admin of your organization has turned on Allow SimpleStruct support to open my project backups in Account Settings (it is off unless you turn it on), or if you agree in your support request. Every opening of a backup is logged.
- Recovery: if you need a backup, email support@simplestruct.com. We will send it to you after confirming the request comes from your organization.
- Opting out: an admin of your organization can turn project backup off at any time in Account Settings. Nothing new is uploaded after that; your projects stay on your own computer. To have backups that are already stored removed, ask us (see Your rights).
Other files you keep on your own computer (for example, .cvpanel or .cvsite files exported to your local disk, and your drawings) are not uploaded to us.
Usage events
We record events that are necessary to operate the token-based billing model: each print or export of a deliverable (PDF, DXF, CSV, or printed page) is recorded as a token spend with a timestamp, the artifact type, a hash of the output file, and whether the spend originated in cv-web or cv-cad. We do not record the contents of those exports.
Billing information
Payments are processed by Stripe. We do not see or store your card number, CVC, or full bank account number. We do receive a customer identifier, the last four digits and brand of the card you used, your billing country, and the products and prices you purchased, so we can match payments to your account and to support requests.
Device information (cv-cad only)
When you sign in to ConstructiVision from AutoCAD, we issue a device token tied to a machine identifier so the plugin can stay signed in without re-authenticating on every print. The machine identifier is a value we generate; it is not your hardware serial number. You can revoke device tokens at any time from your account settings.
Diagnostics and support
If you contact support, we keep the messages and any attachments you send. We may also collect basic diagnostic information (browser version, operating system, error messages) when the application reports a crash, to fix the bug.
How we use information
- Provide the service: open your projects, save your work, run the AI features you ask for, generate exports.
- Operate billing: count token spends against your balance, charge subscriptions, send receipts.
- Keep accounts secure: detect abuse, prevent fraud, respond to suspicious sign-ins.
- Respond to support requests and notify you about service issues.
- Send the text messages you agreed to receive, and honor STOP and HELP replies. We use your mobile number only for those messages.
- Improve the product: aggregate usage trends (no individual identification) inform what we build next.
We do not sell your personal information. We do not run third-party advertising on our products and we do not share your data with ad networks.
Who we share information with
- Infrastructure providers — Supabase (database and authentication) and Amazon Web Services (web hosting) store data on our behalf under contracts that prohibit them from using it for their own purposes.
- Payment processor — Stripe handles all payment processing. Their privacy policy is at stripe.com/privacy.
- OAuth identity providers — When you sign in with Google, Apple, LinkedIn, Dropbox, or Autodesk, we exchange a token with that provider to verify your identity. The provider learns that you signed in to SimpleStruct.
- Autodesk — If you use the AutoCAD plugin, ordinary AutoCAD telemetry may be visible to Autodesk under their separate terms. We do not transmit your project files to Autodesk.
- Law enforcement — Only when we receive a valid legal request and have no lawful basis to refuse.
- Successor companies — If SimpleStruct is acquired or merges, account information transfers to the successor, subject to a continued obligation to honor this policy.
SMS consent is not shared with third parties. Every category above excludes text-messaging originator opt-in data and consent: your mobile phone number and SMS consent are never shared with, sold to, or rented to third parties or affiliates for their marketing or promotional purposes.
Text messages (SMS)
- What we collect: your mobile phone number, and the record of your consent to receive text messages from SimpleStruct (when and how you gave it).
- How we use it: only to send the text messages you agreed to receive, such as account, order, service and support notifications, and to process opt-out (STOP) and help (HELP) requests.
- Who we share it with: no one for marketing. SMS consent is not shared with third parties or affiliates. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors in support services, such as the carrier and messaging platform that deliver our messages, is permitted only to send those messages. All other categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.
- Opting out: reply STOP to any message to stop receiving texts, or HELP for help. You can also email privacy@simplestruct.com. Message frequency varies. Message and data rates may apply. Consent to receive text messages is not a condition of any purchase.
Where data is stored
Account data and project files are stored on infrastructure located in the United States. If you use SimpleStruct from outside the US, your information will be transferred to and processed in the US.
How long we keep information
- Active accounts — for as long as the account is open.
- Closed accounts — account profile and projects are deleted within 90 days of cancellation, unless you ask us to delete sooner.
- Project backups — the latest copy of each project is kept while your account is open, unless you ask us to remove it; a copy replaced by a later save is deleted after 30 days. Backups are deleted with your account.
- Billing records — token ledger entries and payment receipts are retained for seven years to meet accounting and tax obligations.
- Backups — encrypted backups may retain deleted data for up to 30 additional days before they roll off.
Your rights
You can:
- See what information is associated with your account by signing in and visiting Account Settings.
- Export your projects in their native format at any time.
- Turn project backup off at any time (an organization admin, in Account Settings).
- Ask us to delete your account from Account Settings, or by emailing privacy@simplestruct.com. We delete your account details, project backups and project files by hand and email you when it is done, subject to the retention rules above. Deleting your account means your drawing licences may not be recoverable: a drawing that loses its licence must be licensed again, which spends a new token.
- Ask us to correct information that is wrong by emailing privacy@simplestruct.com.
If you live in California, the EU, or another jurisdiction with specific privacy rights (access, portability, erasure, objection, restriction of processing), the same email address is the way to make those requests.
Cookies and local storage
The website uses a small number of cookies and browser local-storage entries to keep you signed in, remember your display preferences, and operate the shopping cart during checkout. We do not use third-party advertising cookies.
Security
All connections to our services use TLS. Passwords are stored as salted hashes; payment card information is held by Stripe and never reaches our servers. Stored data is encrypted at rest. We log administrative access and review it periodically.
Children
SimpleStruct is not directed to children under 16. We do not knowingly collect information from children. If you believe a child has created an account, please contact us and we will delete it.
Changes to this policy
If we change this policy in a way that affects how we use existing data, we will email account holders at least 14 days before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.
Contact
Questions, requests, or complaints: privacy@simplestruct.com.