Privacy policy

1. Who we are

ososglobal.com and the ReOs and CAD Jet software are run by OSOS GLOBAL, operated by Saber Hassan as a sole trader in Egypt (“we”, “us”). We are the controller of the personal data described in this policy, except where section 4 says another company is. We handle all contact by e-mail. If you need our postal address (for example, to send a formal notice), write to legal@ososglobal.com and we will send it to you.

Contact for anything about privacy: privacy@ososglobal.com.

2. What this policy covers

• The website ososglobal.com.
• Your OSOS account and the licence features of ReOs (for Autodesk® Revit®) and CAD Jet (for Autodesk® AutoCAD®). You create and use the account inside the software; the website has no sign-in yet.
• E-mails we send you (sign-in codes, licence and subscription notices) and e-mails you send us.

It does not cover websites we link to, or the AI services you choose to connect to CAD Jet (see section 3.4).

3. What we collect and why

3.1 On the website

The website has no sign-in, no forms and no cookies (see the Cookie policy). It processes only this:

3.2 In ReOs and CAD Jet (licence and account features)

When you sign in or the software checks your licence, it sends our licence server:

• the e-mail of your OSOS account and the sign-in code you type;
• a device id and the public half of a device key the software makes on your PC (the private half never leaves the PC);
• one-way hashes (SHA-256) of a few hardware identifiers (system UUID, system and board serial numbers, system disk serial, CPU name). We never receive the raw values. We use them to recognise your PC after a Windows reinstall, to allow one trial per PC, and to spot copied licences;
• the name of your PC and your Windows user name, so that you and our support can tell your PCs apart (for example when you move your licence to a new PC). They are shown only in our licence administration, never to other users;
• the software and Revit or AutoCAD version, your plan and licence state;
• a SHA-256 fingerprint of the ReOs program files and whether your PC clock looks wrong, to spot changed or copied copies of the software;
• for ReOs Free, the number of files published this month, so the free monthly allowance works across your PCs;
• your IP address, for rate limits and abuse prevention.

We never receive your models, drawings, sheet or file names, project data or the content of your work.

Other connections ReOs makes. Besides the licence check, ReOs connects to the internet only for these:

• Update check. When Revit starts, ReOs asks our licence server whether a newer ReOs exists. The request carries the ReOs version and your IP address, nothing else. It is on by default; you can turn it off in ReOs Settings (“Check for updates at startup”).
• Your country (only when you open the Subscription window). ReOs asks our licence server which country the request comes from, using your IP address, to show the right prices and payment methods. Neither the country nor your IP address is stored; you can change the country in the window.
• Exchange rate (only when you open the Subscription window). ReOs downloads the public US dollar exchange rates from ExchangeRate-API (open.er-api.com), an independent service, to show prices in Egyptian pounds. ReOs sends it nothing about you, but like any website it sees your IP address. LAWYER: is a note enough for the exchange-rate service, or must it be listed in section 4?

Error reports (ReOs, optional). If you turn on “Send anonymous error reports” in ReOs Settings (off by default), ReOs sends, for each error: the kind of error, the names of the ReOs program steps where it happened (no file names or paths), the ReOs and Revit versions, and a random report id. At most 5 reports per Revit session, and the same error only once. The report carries no account, device id, model, file name or project data. Our server uses your IP address only to limit how many reports one address can send, keeping a one-way hash of it for 2 days.

CAD Jet. CAD Jet’s licence check sends the same kinds of data as ReOs above: your OSOS e-mail when you sign in, the device id and public device key, hashes of the same hardware identifiers, your PC name and Windows user name, the CAD Jet and AutoCAD version, a SHA-256 fingerprint of the CAD Jet program files, clock warnings and your IP address. It sends nothing from your drawings.

3.3 Payments

Lemon Squeezy is the merchant of record: it sells you the subscription, takes the payment, handles tax and sends the receipt. It collects your name, billing address, payment method and tax details under its own privacy policy. We receive from it only what we need to give you the licence: your e-mail, the product and plan, the order and subscription status and dates. We never see your full card number.

3.4 AI services you connect to CAD Jet

CAD Jet connects AutoCAD to AI assistants that you choose (a cloud AI service or a model running on your own PC). When you use them, the content you share with them (your prompts and the drawing data the assistant asks for) goes from your PC to that AI provider, under that provider’s terms and privacy policy. It does not pass through our servers. API keys you type into CAD Jet are stored encrypted on your PC (Windows DPAPI) and are never sent to us.

4. Who else processes your data

We do not sell your personal data and we do not share it for advertising.

5. International transfers

Our providers may process data outside your country, including in the United States. Where the GDPR or UK GDPR applies, transfers rely on the providers’ Standard Contractual Clauses or an adequacy decision. LAWYER: confirm transfer wording for each provider and for the operator's own country

6. How long we keep data

Lemon Squeezy keeps payment and tax records for the periods the law requires of it.

7. Your rights

Depending on where you live, you can ask to access, correct, export or delete your data, to restrict or object to some uses, and to withdraw consent at any time. Write to privacy@ososglobal.com from the e-mail of your OSOS account. We answer within one month.

Deleting your account deletes its profile data. Purchase and licence records on the licence servers are kept for the periods in section 6, because we need them for refunds, tax questions and fraud prevention.

If you are in the EU, the UK or another country with a data-protection authority, you can complain to it.

California (CCPA/CPRA): we do not sell or share personal information as those laws define it, and we do not use sensitive personal information to infer characteristics about you.

8. Security

Sign-in uses one-time codes, not passwords. Every request is checked on the server. Licence answers are signed. We keep personal data out of logs. No system is perfectly secure: if a breach affects you, we will tell you and the authority as the law requires. To report a security problem, see our vulnerability disclosure policy or write to security@ososglobal.com.

9. Children

The website, the store and the software are not meant for children. You must be at least 16 to create an account. If we learn that a child’s data was collected, we delete it.

10. Changes

When we change this policy, we update the version and date at the top. If a change is important, we tell account holders by e-mail before it takes effect.

11. Contact

privacy@ososglobal.com · Postal address: sent on request to legal@ososglobal.com