Privacy Policy
Effective Date: January 15, 2026
This Privacy Policy ("Policy") describes how APOGEA ("we", "us", "our") collects, uses, and protects information in connection with your use of our FlowRun software (the "Software").
1. Information We Collect
To provide and improve the Software, we collect the following types of information:
- Account and Authentication Information: We collect information necessary to create and maintain your account, including your email address, hashed password credentials, and information regarding your subscription permissions.
- Local Device Information: To facilitate login and configuration, the Software may store certain data on your local device, including authentication information and configuration files.
- Service Processing Data (Model Data): To perform its core function, the Software requires access to and processing of data from your active Autodesk Revit models (geometry, properties, parameters, etc.).
- Keyboard Information (Optional Feature): If you enable "hotkeys," the Software will monitor keyboard input solely to detect pre-configured combinations. No other keystrokes are logged.
- Update and Version Information: Version verification and security updates.
2. How We Use Your Information
- To Provide and Maintain the Service: Authenticate access and execute commands.
- To Process AI Requests: Transmit necessary Model Data to our AI Providers to process your requests.
- To Improve the Service: Store abstract patterns and lessons learned (excluding confidential or project-specific data).
- For Service Communications: Notifications regarding updates.
3. Information Sharing and Disclosure to Third Parties
We do not sell or rent your personal information. We share information only with:
- Google Firebase: For secure authentication and permissions management.
- Anthropic Claude (AI): We share the context of your request (Model Data) solely for processing purposes. This information is NOT used to train public models.
4. Data Security and Storage
We take the security of your data seriously.
Cloud Data
Protected by encryption in transit (TLS/HTTPS) and at rest within Google Firebase.
Local Data and Internal Communication
- Credentials: Are encrypted locally using the operating system's DPAPI.
- Internal Communication: Occurs via an encrypted local channel (HTTPS) restricted to your own machine ("localhost").
Your Responsibility: You are solely responsible for maintaining the physical and software security of your local device. We are not responsible for breaches resulting from a compromised local environment.
5. Data Retention
We will retain your account information for as long as your subscription is active. Local data can be deleted by uninstalling the Software.
6. Your Rights
You have the right to access, rectify, or request the deletion of your personal information. Contact us to exercise these rights.
7. Contact
If you have any questions about this Privacy Policy, please contact us at our support email.