Data Collection and Log Usage Terms (“Terms”) Version 1.0 – Effective as of: 27/05/2025

​

​

1. Scope and Purpose

These Terms describe how the software solutions developed by AECOder (“Solutions”) collect, use, store, and protect data automatically generated during execution, in compliance with Law No. 13.709/2018 – General Data Protection Law (“LGPD”) and other applicable regulations.

​

2. Data Collected

The Solutions record only technical and operational information, such as:

• Username of the operating system or Autodesk® account in use;

• Name and path of files opened or handled (e.g., ProjectHospital.rvt);

• Workstation identifier (hostname or random GUID);

• Company name (e.g., corporate name or name registered in the software);

• Versions of Autodesk® Revit® (or relevant software, when applicable) and of the Solution itself;

• Usage events (date/time of opening/closing, commands executed);

• Error and exception details (message, stack trace, file hash).

 

We do not collect or log project content, sensitive personal data (Art. 5 II, LGPD), information classified as confidential, or any data that could identify proprietary client content.

​

3. Purposes and Legal Bases

Data are processed to:

1. Diagnose and correct errors;

2. Analyze usage and performance statistics;

3. Improve the features and security of the Solutions.

 

Processing is based on:

• Legitimate interest of the controller (Art. 7 IX, LGPD);

• Performance of the license agreement (Art. 7 V, LGPD);

• Compliance with a legal or regulatory obligation, when necessary (Art. 7 II, LGPD).

​

4. Storage and Retention

Logs are stored in a protected database hosted in an ISO/IEC 27001:2022-certified datacenter, with access restricted to authorized personnel, via TLS 1.2+ encryption.

 

Data are retained for the period necessary to fulfill the purposes described in these Terms, or as long as a legal obligation, legitimate interest, or need to defend rights exists. After that period, personal data are deleted or anonymized, as applicable.

 

In particular, retention may occur for:

• Compliance with legal or regulatory requirements;

• Defense in judicial, administrative, or arbitral proceedings;

• Internal studies and analyses for improvement, provided data are anonymized whenever possible.

​

5. Sharing and International Transfer

We do not sell or disclose data to third parties, except:

• Cloud or database service providers acting as contracted processors, bound by specific data-processing agreements;

• Public or judicial authorities, when required by law.

 

If an international transfer occurs, we will use the mechanisms provided in ANPD Resolution CD/ANPD No. 19/2024 (standard clauses, adequacy decisions, global corporate rules).

​

6. Security Measures

We adopt controls aligned with the ANPD’s “Information Security Guidance for Small-Scale Processing Agents” (Jun/2024) and market best practices (OWASP, NIST SP 800-53), including:

• Role-based access control (RBAC);

• Data encryption at rest and in transit;

• Backup and recovery policies;

• Incident monitoring and alerting;

• Regular vulnerability testing

​

7. Data Subject Rights

The data subject may, at any time, request:

• Confirmation of processing;

• Access to data;

• Correction of incomplete, inaccurate, or outdated data;

• Anonymization, blocking, or deletion of unnecessary or excessive data;

• Portability;

• Information about sharing;

• Review of automated decisions, when applicable;

• Revocation of consent, if that is the legal basis.

 

Requests must be sent to the Data Protection Officer (item 8).

​

8. Data Protection Officer (DPO)

• Name: Maycon Ricardo de Freitas

• E‑mail: maycon.freitas@aecoder.com.br

​

9. Updates to These Terms

These Terms may be amended to reflect legal, regulatory, or operational changes. The current version will always be available at https://www.aecoder.com.br/terms. Continued use of the Solutions after the effective date constitutes acceptance of any changes.

​

10. Acceptance

By installing or using the Solutions, the user declares having read, understood, and agreed to these Terms.

​

​

For questions, please contact the channel indicated in item 8.