Create your account

1. Who we are and what this document is

These Terms of Use (the "Terms") govern the use of BIMUtils ID (the "Service"), the central account of the BIMUtils products, operated by Simplix QWERTY S.R.L., a company registered under no. J10/25/2017, tax identification no. 36902772, with its registered office at Str. Școlii 64A, Pleșești, com. Berca, jud. Buzău, România (the "Operator", "we", "us"). You can reach us at contact@simplix.ro.

By creating an account, by accepting the Terms where the Service asks you to, or by signing in through the Service, you confirm that you have read and agree to them. If you do not agree, do not use the Service.

2. What the Service does

The Service gives you one account for every BIMUtils product (for example hashtagBIM, the BIMUtils desktop add-ins and other applications that offer "Sign in with BIMUtils ID", each a "Product"). It holds your sign-in identity only: your e-mail address, your password, your two-step verification and passkeys, your name, your language and the status of your account. When you sign in to a Product, the Service confirms your identity to that Product.

The Products are separate services. Each Product has its own terms and its own privacy policy, which you accept in that Product. Everything you do inside a Product (your companies, projects, files, roles, subscriptions and any other data) belongs to that Product and is governed by its own terms, not by these Terms. The Service is free of charge.

3. Your account

• You must give a real e-mail address that you control and confirm it with the code we send you. A verified address is how the Products recognise you; an account whose address is not confirmed cannot be used.
• An account is personal: one person, one account. Do not share your password or let anyone else use your account.
• You are responsible for keeping your password secret and for everything done through your account. We recommend turning on two-step verification or a passkey. Tell us at once at contact@simplix.ro if you suspect unauthorised access.
• Keep your e-mail address current. If you lose access to it, you may lose access to your account and, through it, to the Products.

4. Acceptable use

You agree not to:

• create accounts for other people without their consent, use false identities or impersonate others;
• attempt to gain unauthorised access to other accounts, probe or circumvent the security of the Service, or interfere with its operation;
• use automated means to create accounts or to guess passwords or verification codes;
• use the Service in breach of the law or of the terms of a Product.

We may suspend or close an account that breaches these Terms, that we reasonably believe is used fraudulently or has been compromised, or where the law requires it. Suspending an account at the Service also stops you from signing in to the Products through it. Where feasible we notify you first and give you the chance to remedy the breach.

5. Signing in and signing out

While you are signed in to the Service in a browser, the Products you open in the same browser sign you in without asking again. Signing out of a Product in a browser signs you out of the Service and of every Product in that browser; your other devices stay signed in. From your profile you can see your active sessions and sign out everywhere.

6. Changes to your account and to the Products

When you change your name or e-mail address, or when your account is suspended, reactivated or deleted, we inform the Products you use so that they stay current. A Product may also refuse or end your access under its own terms; that does not affect your account at the Service.

7. Deleting your account

You may delete your account at any time from your profile. Before the deletion, we ask every Product you use whether something must be settled there first (for example a company you own or an active subscription); a Product may block the deletion until that is done. The deletion is confirmed with a code and followed by a short grace period during which you may cancel it. Once it runs, your account is erased, you can no longer sign in to any Product with it, and every Product is told to erase or anonymise the data it holds about you under its own policy.

8. Availability

We work to keep the Service available and secure, but we do not guarantee that it will be uninterrupted or error-free. While the Service is unavailable you may not be able to sign in to the Products; sessions already open in a Product are not affected.

9. Changes to the Terms

We may update the Terms when the Service, the Products or the law change. Each version is numbered and dated. When a change requires your renewed acceptance, the Service asks for it at your next sign-in; otherwise the new version applies from its publication. The version you accepted is available from your profile.

10. Intellectual property

The Service, its software, design and trademarks belong to the Operator or its licensors. These Terms grant you only a limited, non-exclusive, non-transferable right to use the Service for its purpose.

11. Liability

To the extent permitted by law, the Service is provided "as is" and "as available", free of charge. The Operator is not liable for indirect or consequential loss, or for loss resulting from the unavailability of the Service, from the compromise of your credentials through no fault of ours, or from the acts of the Products. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under the applicable law, in particular liability for intent or gross negligence, or the rights that mandatory consumer-protection law grants you.

12. Governing law and disputes

These Terms are governed by the laws of Romania. Any dispute that cannot be settled amicably is submitted to the competent courts of Romania. If you are a consumer, you keep the protection of the mandatory rules of the country where you reside and may address the competent consumer-protection authority.

13. Miscellaneous

• If any provision is found invalid, the remaining provisions stay in force.
• These Terms, together with the Privacy Policy and the Data Processing Notice of the Service, are the entire agreement regarding the Service.
• The Terms are provided in several languages; in case of any conflict, the English version prevails.

14. Contact

Simplix QWERTY S.R.L., Str. Școlii 64A, Pleșești, com. Berca, jud. Buzău, România, registered under no. J10/25/2017, tax identification no. 36902772. E-mail: contact@simplix.ro.

1. Who is responsible for your data

The controller of the personal data processed by BIMUtils ID (the "Service") is Simplix QWERTY S.R.L., registered under no. J10/25/2017, tax identification no. 36902772, Str. Școlii 64A, Pleșești, com. Berca, jud. Buzău, România ("we", "us"). For any question about your data, write to contact@simplix.ro.

The Service is the central account of the BIMUtils products. Each product you sign in to (a "Product") is a separate controller for the data it processes about you, under its own privacy policy. This policy covers only the Service.

2. What data we process

• Account data: your e-mail address and whether it is verified, your name, your preferred language, the status of your account and the dates it was created and changed.
• Security data: your password, stored only as a one-way hash (we never know it); your two-step verification settings and the secret of your authenticator app (stored encrypted); the public keys of your passkeys; the browsers you chose to trust; verification codes (stored only as hashes, for a short time).
• Session and sign-in data: your active sessions with the IP address, browser and device information, and the dates of sign-in and last activity; failed sign-in attempts used to protect your account against guessing.
• Product links: a random identifier assigned to you (the same for every Product, never your e-mail), the Products you have signed in to, and when you first and last used each.
• Consents: which version of our legal documents you accepted, when, and from which IP address and browser.
• Technical and audit logs: records of security-relevant actions on your account (sign-ins, password, e-mail and two-step changes, deletion requests) and technical error logs.
• Messages: the e-mails we send you (verification codes, security notices) and their delivery status.

We do not ask for and do not process special categories of data, payment data or the content you create in the Products.

3. Why we process it and on what legal basis

• To provide your account and sign you in to the Products — the performance of the contract with you (Article 6(1)(b) GDPR).
• To keep your account and the Products secure (verification codes, two-step verification, lockout after failed attempts, session management, audit logs) — our legitimate interest and yours in preventing unauthorised access (Article 6(1)(f) GDPR).
• To keep the Products you use current about your name, e-mail address and account status, and to ask them before your account is deleted — the performance of the contract (Article 6(1)(b) GDPR).
• To prove the consents you gave and to answer the authorities — our legal obligations (Article 6(1)(c) GDPR).

We do not use your data for advertising, we do not sell it and we do not build marketing profiles. We do not make decisions about you based solely on automated processing.

4. Who receives your data

• The Products you sign in to. When you sign in to a Product, it receives your random identifier, your e-mail address and whether it is verified, your name and your language. Afterwards it receives notices when these change, when your account is suspended or deleted, and when you sign out. A Product receives nothing about you until you sign in to it.
• Our service providers, who process data on our behalf under a contract and only on our instructions: the e-mail delivery provider (ZeptoMail by Zoho, EU data centre) and the providers of the servers that host the Service in the European Union.
• Authorities, where the law requires it.

We do not transfer your data outside the European Economic Area. If that ever becomes necessary, we will do so only with the safeguards the GDPR requires and will update this policy.

5. How long we keep it

• Account, security and Product-link data: as long as your account exists.
• Sessions: until you sign out, or at the latest after 14 days without activity or 90 days in total.
• Registrations never confirmed: deleted after 30 days.
• When you delete your account: after a grace period of 7 days, your account data is erased or anonymised, and the Products are told to do the same with theirs. Consent records and audit entries that we must keep to prove our compliance are kept in anonymised or minimised form for as long as the law requires.
• Technical logs: for a limited period, for security and troubleshooting, then deleted.

6. Your rights

You have the right to access your data, to have it corrected, to have it erased, to restrict or object to its processing, and to receive it in a portable format. From your profile you can change your name and e-mail address, download your data ("Download my data"), see and end your sessions, and delete your account. For anything else, write to contact@simplix.ro; we answer within one month.

You also have the right to lodge a complaint with the supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro) — or with the authority of the EU country where you live or work.

7. Cookies

The Service uses only cookies that are strictly necessary for it to work: the session cookie that keeps you signed in, and the short-lived cookies of the sign-in exchange with the Products. They contain no advertising or tracking and do not require your consent.

8. Security

We protect your data with encryption in transit (HTTPS), one-way hashing of passwords and codes, encryption of the secrets we must keep, access controls and logging. No system is perfectly secure; if a breach affects your data in a way that puts you at risk, we will tell you and the authority as the law requires.

9. Changes to this policy

We may update this policy when the Service or the law changes. Each version is numbered and dated, and the version you accepted is available from your profile. Important changes are announced in the Service.

Data Processing Notice

This notice is given under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) by Simplix QWERTY S.R.L., registered under no. J10/25/2017, tax identification no. 36902772, Str. Școlii 64A, Pleșești, com. Berca, jud. Buzău, România, the controller of the personal data processed by BIMUtils ID. Contact for data protection matters: contact@simplix.ro. It summarises each processing activity; the Privacy Policy explains them in full.

1. Account and sign-in

• Data: e-mail address and its verification, name, language, password hash, account status.
• Purpose: creating and keeping your account; signing you in to the Service and to the BIMUtils products.
• Legal basis: performance of the contract (Art. 6(1)(b)).
• Retention: while the account exists; unconfirmed registrations 30 days.

2. Account security

• Data: two-step verification settings and encrypted authenticator secret, passkey public keys, trusted browsers, verification codes (hashed), sessions with IP address and browser information, failed sign-in attempts, security audit entries.
• Purpose: preventing unauthorised access to your account and to the products.
• Legal basis: legitimate interest (Art. 6(1)(f)) — the protection of your account, which you share.
• Retention: sessions at most 14 days idle or 90 days in total; the rest while the account exists, audit entries minimised after deletion as the law requires.

3. Disclosure to the products you use

• Data: a random identifier, e-mail address and its verification, name, language; later changes, suspension, deletion and sign-out notices.
• Recipients: only the BIMUtils products you sign in to, each an independent controller under its own privacy policy.
• Legal basis: performance of the contract (Art. 6(1)(b)) — signing in to a product is the service you ask for.
• Retention at the Service: the list of products you used and the first and last use, while the account exists.

4. Consent records

• Data: the document versions you accepted, the date, IP address and browser.
• Purpose: proving which terms you accepted.
• Legal basis: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)).
• Retention: while the account exists, then in minimised form for as long as the law requires.

5. Service e-mails

• Data: e-mail address, name, language, the message and its delivery status.
• Purpose: verification codes and security notices. We send no marketing.
• Legal basis: performance of the contract (Art. 6(1)(b)) and legitimate interest in security (Art. 6(1)(f)).
• Processor: ZeptoMail by Zoho (EU data centre).

6. Processors and transfers

We use processors bound by a data processing agreement: the e-mail delivery provider and the providers of the servers hosting the Service in the European Union. Your data is not transferred outside the European Economic Area.

7. Your rights

Access, rectification, erasure, restriction, objection and portability (Articles 15–21 GDPR), exercised from your profile (download your data, change your details, delete your account) or by writing to contact@simplix.ro. You may lodge a complaint with ANSPDCP (www.dataprotection.ro) or with the supervisory authority of your EU country. Providing your e-mail address and a password is necessary to have an account; without them we cannot provide the Service. No decision about you is based solely on automated processing.