Privacy policy

Last updated October 14, 2026

Datum is a building information modelling app that runs in your browser. This page says what Datum keeps about you and your projects, why, who else handles it, and how to have it changed or deleted. Questions go to support@datumbim.io.

What Datum keeps

• Your account: your name, your email address and your password, which is kept only as a salted hash (scrypt) that can't be turned back into the password. Accounts are made by an admin's invitation.
• Your sign-in: a cookie that keeps you signed in. It's used for nothing else, and Datum sets no advertising or tracking cookies.
• Your projects: what you and your team model, draw, comment and upload: models, drawings, sheets, components, the files you load, saved versions and the files exports make.
• Your settings: your preferences in the app, such as your theme and keyboard shortcuts.
• Datum Agent: if you use it, your chats with it, the short notes it keeps about a project and summaries of its chats.
• Connected services: if you connect a cloud store (Egnyte or Google Drive) to a project, the access Datum is given to it, encrypted (AES-256-GCM) on the server and never sent back to any browser. If you open a model from Autodesk, your Autodesk sign-in is held only in your browser while the page is open.
• Server logs: technical records such as errors and requests, kept to run the service and keep it secure.

What it's used for

Datum uses this information only to run the app for you and your team: to sign you in, to keep and share your projects with the people on them, to make the exports and copies you ask for, and to keep the service working and secure. Datum doesn't sell your data, doesn't show advertising and doesn't use your projects to train AI models.

Who else handles it

• Hosting: Datum runs on Railway, which keeps its servers, database and files.
• Datum Agent: when you use it, your messages and the parts of your project it works with are sent to Anthropic, the AI provider that runs it. Anthropic doesn't use this data to train its models.
• Services you connect: Egnyte, Google Drive or Autodesk receive what you ask Datum to send them, such as an export's file, and Datum reads from them only what you ask it to.
• Your team: everyone on a project sees its content and who is working on it, live.

Datum may also disclose information where the law requires it.

Google user data

When you connect Google Drive, Datum asks only for access to the files it creates and the folders you pick in Google's own picker (the drive.file scope). It uses that access only to copy the files your exports make into the folder you picked, and to list the folders you picked so you can choose one. It doesn't read your other files. Datum doesn't use Google user data to develop, improve or train AI models, doesn't sell it and doesn't share it except to provide these features. Datum's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove the connection in the Print window's Files tab at any time, and revoke Datum's access from your Google Account's security settings.

Security

Datum is served only over HTTPS. Passwords are hashed, repeated failed sign-ins are slowed down, and the access tokens of connected services are encrypted at rest. Only the people on a project can open it.

How long it's kept

Your account and projects are kept while they're in use. When a project is deleted, its content and files are deleted with it. Exports keep the newest files of each project and schedule, and older ones are deleted. To have your account or your data deleted, ask your admin or write to support@datumbim.io.

Your choices

You can see and change your projects in the app, disconnect any service you connected, and ask us for a copy of your personal information, to correct it or to delete it, by writing to support@datumbim.io.

Changes

If this policy changes, the new version is posted here with its date.