The short version: the licence server holds a hash of your licence key, a hash of a device fingerprint and a two-letter country code — plus your name, your email address and our own note about your case, when the store passes them to us or you write to us for help. It never holds an IP address, never holds your key in readable form, and never holds anything at all from your Revit projects.
2. The support details we hold, when we have them
Added in August 2026, and this page was updated in the same change. The three identifiers above are enough to run a licence and not enough to help a person: an email arriving from a customer whose only trace here is a hash cannot be answered without asking them to prove which hash is theirs. So a licence can now carry the following, and this is the complete list.
- Your name and your email address, when the store that took your payment passes them to us, or when you give them to us yourself by writing for support. The product never asks you for either one, and a licence with both fields empty works exactly the same.
- A reference for your case, and a private note we write about it: what went wrong, what we checked, what we did. We write it, not you. You may ask what it says about you and we will tell you.
- The date your licence runs until, when it has one.
- That is the whole of it. There is no record of what you do inside Spacealyx — no usage history, no feature counts, no profile. The support screen is built out of the licence, seat and event rows described further down, and nothing else exists to build it out of.
6. Why we keep it
To know that a licence is genuine, to keep one licence from quietly becoming twenty, to keep our own hosting inside a free tier that abuse would otherwise burn through, and to be able to answer you when something goes wrong.
That last reason is the whole purpose of the name, the email address and the note. They are used to find your licence when you write to us and to answer you about it. They are not used to market anything to you, they are not combined with anything from any other source, and they are not the basis of any decision made about you automatically.
None of it bans anyone automatically. Unusual activity ranks a list that a human reads, because a wrong ban on a studio that is working costs far more than a copied key.
10. Your rights
[[ THE DATA-PROTECTION LAW THAT APPLIES TO THE SELLER, AND THE RIGHTS IT GIVES — to be confirmed before selling ]]
In practice: present your licence key, and we can tell you exactly which rows relate to it, tell you what our note about you says, correct your name or email address, empty those fields entirely, revoke the licence, or release its seats.
Emptying those fields costs you nothing: your licence keeps working, because it has never depended on them. What it costs is our ability to recognise you the next time you write, and we will have to ask you for your key again.
One honest limit: the licence event trail is append-only by design and cannot be rewritten, not even by us. That is exactly why it holds no name, no email address and no IP address — hashes, country codes and timestamps only. Your name and email live on the licence record instead, which we can correct or empty on request.
Requests and questions: [[ PRIVACY CONTACT EMAIL ]].
11. Changes to this notice
If what we store changes, this page changes with it and the date at the top moves. We will not start collecting something new and quietly leave this text as it was.
That has already happened once, and it is written down rather than smoothed over: in August 2026 we added the support details in clause 2 — a name, an email address, a reference and a note — and this notice was rewritten in the same change. Before that it said we held none of them, which was true then and would have been false the day after.