Privacy policy.

1. Who we are

This policy explains how Optimus Build Inc., a corporation incorporated in the State of Delaware, United States, with its registered address at 254 Chapman Rd, Ste 208-27983, Newark, DE 19702, United States (“Optimus Build”, “we”, “us” or “our”), processes personal data when you visit optimusbuild.ai (the “Site”), send us a request through it, write to us, or use the Optimus Build platform (the “Platform”). For the personal data described in this policy, we are the controller.

For any question about this policy or about your personal data, write to contact@optimusbuild.ai. Words that start with a capital letter and are not defined here have the meaning given in our Terms and Conditions (the “Terms”).

2. Data in our customers’ projects

The documents, drawings, models and other content that our customers put into the Platform may contain personal data, for example the names in a land registry extract or on a drawing. For that data, the customer, usually the organization that gave you access to the Platform, is the controller and decides what is processed and why; we process it on the customer’s behalf, under the processing terms in Section 22 of our Terms. If your personal data is in such content, please address your request to that organization; we will help it to answer you.

3. What we collect and why

3.1 When you visit the Site. Our web server records, for each request, your IP address, the date and time, the page requested, the referring page and your browser’s identification string. We use these records to deliver the Site, to keep it secure, to prevent abuse and to find faults. The Site uses no analytics, no advertising and no tracking cookies, and it loads no scripts, fonts or other content from third parties: everything it shows comes from our own server.

3.2 When you send a request through the Site. The forms on the Site let you ask for a session on your plot, contact us, apply to work with us or become a design partner. They ask for your name, your company and your email address and, if you choose to give them, your phone number, your role, the country you build in, a link to your work, your brief or your message, and the files you attach. When you send a form, we also receive the date and time and the IP address from which it was sent. We use this information to answer you, to prepare and provide what you asked for and, for applications, to assess your application.

Your request reaches us as one email, with its attachments, through our email provider. The service that receives the form keeps no copy of it: it stores nothing in a database, and its log records one line, with the type of request, your name, your email address and the number of files you attached (and, if the email could not be sent, the request itself, so that it is not lost). It also holds your IP address in its memory, to limit the number of requests that can be sent from one address within ten minutes.

3.3 When you use the Platform. If you have an account, we process:

1. account data: your name, your email address, your organization and your role in it, the language of your interface, and the dates on which your account was created and last used; your password is stored only as a cryptographic hash;
2. an activity log: each page of the Platform you open, with your account, your email address, your IP address and the time, which we use to keep the Platform secure, to support you and to understand how the Platform is used;
3. what you put into the Platform: your projects, documents, instructions and messages to the assistant, which we process to provide the Services under the Terms and, for the personal data they contain, as described in Section 2;
4. error reports: when an error occurs, technical information about it (the service, the version, the code involved and the time) is sent to our error-monitoring provider, without cookies, IP addresses, the content of requests or the documents and images of our customers; and
5. billing data: if you buy the Services, the names, addresses, tax identification numbers and payment details needed to invoice and to keep accounts.

3.4 When you write to us or meet us. We keep your contact details and our correspondence to answer you, to manage our relationship and to provide support.

3.5 What we do not do. We do not send newsletters or marketing messages you did not ask for, we do not sell personal data, we do not share it for advertising, and we do not build profiles of the people who visit the Site.

4. Legal bases

Where the EU or UK General Data Protection Regulation (“GDPR”) applies, we rely on:

1. the performance of a contract, or the steps you ask us to take before entering into one, for providing the Platform, answering a request for a session or an offer, and assessing an application;
2. our legitimate interests in answering the people who contact us, in keeping the Site and the Platform secure and working, in supporting our customers and in improving the Services; you may object to this processing at any time (Section 10);
3. our legal obligations, for invoicing, accounting and tax, and when an authority lawfully requires information; and
4. your consent, only where we ask for it, for example before we use your name or a quote from you in our materials; you may withdraw it at any time, without affecting what was done before.

5. Cookies and local storage

5.1 The Site. The Site sets no cookies. Your browser’s local storage remembers a few choices you make on its pages, such as the country whose documents you are viewing, so that a page opens on them next time; they never leave your browser.

5.2 The Platform. The Platform sets one cookie, which keeps you signed in, and uses your browser’s local storage for your preferences, such as the language of the interface, the display settings of the editors and of the 3D views, and where you were in a project. Both are strictly necessary for the service you ask for, which is why the Platform does not ask for your consent to them. It uses no analytics or advertising cookies.

5.3 Fonts and maps in the Platform. To display its interface and maps, the Platform loads fonts from Google Fonts and map tiles from OpenStreetMap. Your browser then connects to their servers, which receive your IP address and the usual information of a web request.

6. Who receives personal data

We share personal data only with the following recipients, and only as far as each needs it:

1. our service providers, who process it on our instructions: Microsoft, which hosts the Site and the Platform on its Azure cloud, in its East US region; Google, which provides our email, including the emails produced by the forms of the Site; Anthropic and OpenAI, which provide the AI models behind the assistant, the reading of documents and parts of the design process, and receive the parts of project content those features need, under terms that do not allow them to use it to train their models; and Functional Software, Inc. (Sentry), which receives the error reports described in Section 3.3;
2. Google Fonts and the OpenStreetMap Foundation, which receive your IP address when the Platform loads fonts and map tiles (Section 5.3);
3. the people in your organization: the Platform shows your name and your work in a project to its administrators and to the people with whom the project is shared;
4. our professional advisers, such as lawyers and accountants, who are bound by confidentiality;
5. authorities, when the law requires it, or to establish, exercise or defend legal claims; and
6. a buyer or successor, if our business is merged, sold or reorganized, in which case this policy continues to apply to your data.

We do not sell personal data, and we do not share it for cross-context behavioral advertising.

7. International transfers

Optimus Build Inc. is a U.S. company, and the Site and the Platform are hosted in the United States. If you are in the European Economic Area, including Romania, in the United Kingdom or in Switzerland, your personal data is therefore processed in the United States; our team may also access it from the European Union, and some of our service providers process it in other countries. Where a transfer requires a safeguard under the GDPR, we and our providers rely on the EU–U.S. Data Privacy Framework where the recipient is certified under it, or on the standard contractual clauses approved by the European Commission. You may ask us for a copy of the safeguards that apply to your data.

8. How long we keep it

1. Requests sent through the Site, including applications, and our correspondence about them: up to twenty-four (24) months after our last exchange, unless they lead to a contract, in which case we keep them for as long as the contract requires.
2. Account data: for as long as your account is open, and then no more than ninety (90) days after it is closed.
3. The activity log of the Platform: twelve (12) months.
4. Server logs, including the logs of the form service: they are rotated and overwritten automatically as new entries are written, and kept only for as long as they are needed for security and troubleshooting.
5. Error reports: for the limited period set by our error-monitoring provider, after which it deletes them automatically.
6. Billing records: for as long as tax and accounting law requires.
7. Project content: as described in the Terms, which set out when Projects are kept, exported and deleted.

We may keep data longer where the law requires it or where it is needed to establish, exercise or defend legal claims, and only for that purpose.

9. Security

We protect personal data with measures appropriate to its nature: the Site and the Platform are served only over encrypted connections, passwords are stored as hashes, access to our systems is limited to the people who need it, and error reports are stripped of personal data before they leave our systems. No system is perfectly secure; if a breach affects your personal data, we will inform you and the competent authorities as the law requires.

10. Your rights

10.1 In the European Economic Area, the United Kingdom and Switzerland. You have the right to access your personal data and receive a copy of it, to have it corrected, to have it erased, to restrict its processing, to receive it in a portable format, to object to processing based on our legitimate interests, and to withdraw your consent at any time. You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work; in Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).

10.2 In the United States. Depending on the state where you live, you may have the right to know what personal data we hold about you and to receive a copy of it, to have it corrected or deleted, to opt out of its sale, of its sharing for targeted advertising and of profiling, and not to be discriminated against for using these rights. We do not sell or share personal data and do not use it for targeted advertising or profiling, so there is nothing to opt out of; we treat a Global Privacy Control signal from your browser as such an opt-out. If we decline a request, you may appeal by replying to our answer.

10.3 How to use them. Write to contact@optimusbuild.ai. We may ask you for information to confirm your identity, and we will answer within one month, or within the period that the law of your state sets, and tell you if we need more time. Where the law allows it, an authorized agent may make a request for you. For personal data in a customer’s project, see Section 2.

11. Automated decisions

We do not take decisions about people based solely on automated processing that produce legal effects on them or affect them similarly significantly. The AI in the Platform designs buildings; it does not assess people.

12. Children

The Site and the Platform are intended for professionals aged eighteen (18) or over. We do not knowingly collect personal data from children; if you believe that a child has sent us personal data, write to us and we will delete it.

13. Other websites

The Site and the Platform may link to the websites of others, which have their own privacy policies. We are not responsible for their practices.

14. Changes to this policy

We may update this policy, for example when the Services or the law change. We will publish the updated policy on this page with a new “last updated” date and, if a change is material, we will also tell the holders of Platform accounts by email or through the Platform.

15. Contact

Optimus Build Inc., 254 Chapman Rd, Ste 208-27983, Newark, DE 19702, United States. For privacy questions and requests: contact@optimusbuild.ai. You can also write to us from this page.

Last updated October 22, 2026.