Privacy Policy — Udraft 3D
Version 1.0 — 30 August 2026
This policy explains how Udraft Pty Ltd (ACN 670762839) ("Udraft", "we", "us") collects, uses, stores and discloses personal information when you use the Udraft 3D website and file-creation service at udraft3d.udraft.com.au (the "Service"), and the Udraft 3D software when it is offered. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
If you have any question about this policy or your information, contact us at admin@udraft.com.au.
1. What we collect
Account details. When you create an account we collect your email address, an optional company name, your country (used to decide whether GST applies to your purchases) and a password. Passwords are stored only as a one-way cryptographic hash — we cannot read them. If you enable two-factor authentication, the authenticator secret is stored encrypted.
Sign-in with Google or Microsoft. If you choose to sign in with Google or Microsoft, we receive from that provider only your email address, your name, and the provider's account identifier. We do not receive your password, your contacts, your files, or anything else in the account, and we do not post to or act on that account. Udraft 3D's use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements: the information is used only to sign you in and create your account, and is never sold, never used for advertising, and never transferred except as needed to provide the Service or as required by law.
Files you upload. The models you upload (Revit, IFC, Navisworks, DWG, point clouds and similar) exist on our servers only long enough to create your interactive HTML file. The output is deleted the moment you download it, or two hours after the job finishes, whichever comes first, and the uploaded input is removed with the job. We do not open, review or reuse the content of your models except as needed to run the conversion and to diagnose a failure you report.
Payment information. Payments are handled by PayPal. We never see or store your card number or bank details. We keep the record PayPal returns to us — the transaction identifier, the amount, and what was bought — because tax law requires us to keep invoice records.
Free-tier email verification and marketing. The free tier asks for a verified work email address before creating a file. With your consent (given when you verify that address, as described in our Terms & Conditions), we may send that address a small number of follow-up offers. Every such email carries a working unsubscribe link, and unsubscribing is immediate and permanent.
Company accounts. If your company uses a shared (Team or Pro) account, the company administrator can see the usage — jobs, dates, sizes and token spend — of members on the company's domain, because they are paying for it.
Technical records. Like almost every web service we keep short-lived logs of IP addresses, browser user-agent strings and request times, for security and to diagnose faults. Sessions are managed with an essential cookie. We do not run third-party analytics, advertising trackers or social-media pixels.
Your logo. If you upload a company logo it is stored with your account and embedded in the viewer files you create, which is its whole purpose.
2. How we use information
We use personal information to operate the Service: to create your files, keep your account secure, take payments and issue tax invoices, provide support, meet our legal obligations (including tax record-keeping), send you the transactional emails the Service needs (password resets, receipts, verification codes), and — only with consent — the marketing described above. We do not sell personal information, and we do not use it to train machine-learning models.
3. Who we share it with
We share information only with the providers needed to run the Service, and only what each needs:
Autodesk. Creating a file from a Revit, DWG or Navisworks model sends that uploaded model to Autodesk Platform Services, Autodesk's cloud conversion service, which may process it on servers outside Australia (typically the United States). Autodesk processes the file to convert it and is bound by its own privacy policy. Open formats (IFC, DXF, point clouds) are converted on our own server and are not sent to Autodesk.
PayPal for payments; Google or Microsoft if you choose to sign in with them; our email provider for sending the emails described above; and our hosting provider for the server the Service runs on.
We may also disclose information where the law requires it — a court order, or a lawful request by an authority. We do not otherwise disclose personal information to anyone.
4. Where it lives and how long
Account and billing records are stored on our server. Uploaded models and created files are transient, as described in section 1. Account details are kept while your account exists; when you delete your account, the account record is closed and its personal details are no longer used, while invoice and transaction records are retained for the period Australian tax law requires (generally five years). Verified free-tier email addresses are kept until you unsubscribe or ask us to remove them.
5. Security
The Service is reachable only over HTTPS. Passwords are hashed with a modern memory-hard algorithm, two-factor secrets and payment credentials are encrypted at rest, and every account supports — and password-based accounts require — two-factor authentication. No internet service can promise perfect security, but if we become aware of a data breach that is likely to result in serious harm we will notify affected people and the OAIC as the Privacy Act requires.
6. Access, correction and complaints
You can see and change most of your details from your account page, and you can delete your account yourself. For anything else — a copy of the information we hold about you, a correction, or a complaint about how we have handled it — email admin@udraft.com.au and we will respond within a reasonable time, normally 30 days. If you are not satisfied with our response you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
7. Changes
If this policy changes in a way that matters, we will publish the new version here with a new version number and date. Continued use of the Service after a change means the current policy applies.
Udraft Pty Ltd (ACN 670762839) — udraft.com.au — admin@udraft.com.au