Privacy Policy
Last updated 21 October 2026
In short: by default the Model Assurance checks run in your browser, and your IFC models are read on your own computer and never uploaded to us. A project you set to process on Axiom's servers uploads its models, and keeps them until you delete them.
If you create an account, we keep your email address, the details you add and the work you choose to save, so you can reopen it on any device. We don't sell your data, show adverts, or use tracking or analytics cookies.
Who we are
Axiom Digital ("we", "us") runs axiom-digital.uk and is the controller of the personal data described here, under the UK General Data Protection Regulation and the Data Protection Act 2018.
For anything about your data, email info@axiom-digital.uk.
Your IFC models
When you check, explore, export or view a model in 3D on the Assurance page or the 3D viewer, the file is read inside your browser tab. The checking engine is downloaded to your browser, and the work happens on your computer. The model file itself is never sent to our servers.
The same applies when you open a model from SharePoint or OneDrive: it goes straight from Microsoft to your browser, not through us.
Server processing. Each project asks where its models are processed. If you choose On Axiom's servers, the models you check in that project are uploaded to our cloud storage in the UK, checked there, and kept with the project, together with a table of each element's properties and a 3D copy for the viewer, so you can reopen and compare them. Only you can see them. They stay until you delete them: deleting a model, the project or your account deletes its files, property table and 3D copy. A run's results are kept on the server for 7 days, long enough to reach your browser, and in your account if you save runs there.
What we keep, and why
| Data | Why | Lawful basis |
|---|---|---|
| Account: your email address, the name and company you choose to add, where your new projects process models by default, whether you asked to hear when server processing is ready, and your plan (free or paid, and when a paid plan ends) | To sign you in with an emailed code or link, to show your account, and to open the features your plan includes | Contract: providing the service you signed up for |
| Work you save: IDS and COBie rulesets, project details and set-ups, and check runs you keep in your account (results, reports and the models' properties, never the IFC file) | So you can reopen them on any device | Contract |
| Sign-in and security records: when you signed in, your session, and one-time sign-in codes | To keep you signed in and your account secure | Contract and legitimate interests (security) |
| Abuse protection: a one-way hash of your IP address or email when you request or enter a sign-in code | To limit repeated attempts | Legitimate interests (security) |
| Contact form: your name, email address and message | To reply to you | Legitimate interests (answering your enquiry) |
| Server logs: IP address, browser and pages requested, kept by our hosting provider | To run and protect the website | Legitimate interests (security and reliability) |
You don't need an account to explore models or use the 3D viewer. Without one, nothing about your models is sent to us. The Assurance checks need a paid plan. We don't take payments on the site yet, so we hold no card or bank details.
How long we keep it
- Your account and saved work: until you delete them, or delete your account. Deleting the account removes your rulesets, projects, saved runs and sessions straight away.
- Models processed on Axiom's servers: until you delete the model, its project or your account. A run's results stay on the server for 7 days.
- Sign-in codes: they expire after 15 minutes, and expired codes are cleared out automatically.
- Abuse-protection records: cleared out automatically once they're 24 hours old.
- Sessions: 30 days from your last visit, or until you sign out.
- Contact messages: as long as needed to deal with your enquiry, and no longer than two years.
- Hosting logs: for the period set by our hosting provider, typically a few weeks.
Cookies and storage on your device
We use one cookie, axiom_session, and only when you sign in. It is strictly necessary to keep you signed in, lasts up to 30 days, and is not used for tracking. We set no advertising or analytics cookies.
The site also stores a few things in your own browser that are never sent to us: your light or dark theme choice, Assurance page preferences, and recent check results kept on this device. You can clear them at any time in your browser's settings.
Services we rely on
These providers process data on our behalf, or are contacted by your browser when you use the site:
- IONOS: website hosting, database and email. Your account and saved work are stored here, and contact form messages are emailed to our IONOS mailbox.
- Microsoft: only if you choose to open models from SharePoint or OneDrive. You sign in with Microsoft directly. We ask only to read the files you pick, and the sign-in lasts for that browser tab; it is not kept on our servers.
- Google Fonts, jsDelivr, GitHub and PyPI: your browser downloads the site's font and the checking engine from these. Like any website request, they see your IP address.
- buildingSMART (bSDD): looked up when you browse classifications and properties in the IDS editor.
Some of these providers may process data outside the UK. Where they do, the transfer is covered by UK adequacy regulations or the standard contractual safeguards those providers offer.
Your rights
You can ask to see, correct, export or delete the personal data we hold about you, object to or restrict our use of it, or withdraw consent where we relied on it. You can update your details or delete your account yourself on the account page. For anything else, email info@axiom-digital.uk. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.
Changes to this policy
If we change how we handle your data, we'll update this page and the date at the top. Significant changes will also be emailed to account holders.