Informativa sulla privacy

⚠ Placeholder document

This Privacy notice is a placeholder for the Beta period. The final version is pending review by legal counsel. For any urgent privacy questions, contact info@aec.codes.

This notice describes how the AEC.codes QTO add-in handles data during the public Beta. The add-in is published by MAW EOOD (Bulgaria), trading as AEC.codes.

What data the add-in stores

What network calls the add-in makes

  1. Update check. Once per Revit session, the add-in performs GET https://aec.codes/qto/version.php over HTTPS to check whether a newer release is available.
  2. License tier resolution. Once per Revit session, the add-in performs GET https://aec.codes/qto/license_v2.php over HTTPS to determine your account tier (Freemium or Pay).
  3. Anonymous install statistics. Once per Revit session, the add-in performs POST https://aec.codes/qto/telemetry.php sending a small JSON payload with: an anonymous install identifier, the current Revit year, the list of Revit years where QTO is installed on this machine, the add-in version, and the .NET runtime version. You can opt out of this call in QTOSetup → About.
  4. Bug reports (opt-in). Submissions you make via the in-app feedback flow or the feedback form include the content you typed plus, optionally, your email address if you provide one.

All three per-session requests carry a structured User-Agent header of the form AECCodes-QTO/<version> (Revit/<year>; dotnet/<runtime>).

What the server records

For each request from the AEC.codes QTO add-in, the server records:

The server does not record: your IP address, your Autodesk Account ID, your Windows username, your machine name, your project name, your model contents, or any other identifying information.

Why: we count active installations to (a) plan support resources, (b) prioritise bug fixes by version distribution, (c) decide which Revit years remain supported. Legal basis: legitimate interest under GDPR Article 6(1)(f).

Retention: telemetry records are retained for at most 12 months and then purged.

Anonymous install identifier

To count distinct installations (rather than just sessions), the add-in generates a random identifier on first run and stores it locally at:

%LOCALAPPDATA%\AEC.codes\QTO\install-id

This identifier is a UUID v4: a random 128-bit number with no link to your name, email, IP, or any other personal data. It is generated locally on your machine and is shared by the add-in across all Revit versions installed for the same Windows user account, so that a user with QTO on Revit 2025, 2026, and 2027 counts as one installation, not three.

You can reset this identifier at any time by deleting the file above; a new random identifier will be generated on the next add-in launch.

Under Recital 26 GDPR, identifiers that are not linked to any natural person are considered anonymous data and fall outside the scope of personal data protection. The legal basis for collecting it is legitimate interest under Article 6(1)(f) — running a sustainable software service.

Revit-year scanning

To report which Revit versions you have QTO installed in, the add-in performs a narrow filesystem check: it tests whether the file AECcodes.addin exists in each subfolder of:

%APPDATA%\Autodesk\Revit\Addins\

Only the existence of that one file in that one directory tree is checked. No file contents are read; no other directories are scanned; no add-ins other than QTO are detected.

How to opt out of install statistics

Open QTOSetup in Revit and go to the About section. There is a checkbox labeled "Send anonymous install statistics" — uncheck it. The change takes effect immediately; no POST will be issued in subsequent sessions.

The two functional calls (update check and license tier) cannot be disabled in-app — they are required for the add-in to work. They do not record any personal data.

What the add-in does NOT do

Data you submit voluntarily

If you submit a bug report or contact us by email, we use the information solely to triage, reproduce, and respond to your report. We retain emails for as long as we maintain a working record of the issue.

To exercise your GDPR rights or contact our Data Protection Officer: Send a privacy request

Your rights (GDPR)

As MAW EOOD is established in the European Union, the add-in's data handling is subject to GDPR. You have the right to access, correct, and request deletion of any personal data we hold, and to lodge a complaint with the Bulgarian Commission for Personal Data Protection.

Contact

Questions about this Privacy notice? Send a privacy request

This Beta 1 privacy notice is provisional. Last updated 2026-05-20.