Privacy policy.

Last updated: 14 September 2026

The short version: the files you open in the PDF tools on this site are never sent to us or to anyone else. All processing happens inside your browser, on your own computer.

1. Who is responsible

Nivela is a brand of STM Engenharia, based in Belo Horizonte, Minas Gerais, Brazil. For anything about privacy or your data, write to contato@nivelabim.com. We answer within 15 days, as Brazilian data protection law requires.

2. Your files

The PDF tools (merge, split, compress, extract pages, PDF to images and images to PDF) run entirely in your browser, using JavaScript libraries that execute on your machine.

• No file is sent to a server of ours or of anyone else.
• No file is stored, copied or analyzed by us.
• When you close or reload the page, everything loaded disappears from memory.

You can check for yourself: the tools keep working even if you turn off your internet connection after the page has loaded.

3. Data you deliberately give us

Outside of a subscription, covered in the next section, the only personal data we may receive is the email address you type into the plugin waiting list, and only if you submit the form.

• Purpose: to tell you when the plugins launch and about pre-launch conditions.
• Why we may do this: your consent, given when you submit the form.
• Sharing: we do not sell or hand your address to third parties.
• Unsubscribing: every email we send carries an opt-out link, and you can ask to be removed at any time through the contact address.

4. Subscription, payment and license

If you subscribe to Nivela AutoDimension, we begin processing the data below. This section describes exactly what is recorded, and nothing beyond it.

Payment is processed by Stripe. Your card details are typed into Stripe's environment and never pass through our servers: we do not receive, see or store card numbers, expiry dates or security codes. Stripe acts as controller of the payment data, under its own privacy policy.

What we keep in our database:

• Your email address and the identifiers Stripe returns to us (customer and subscription ids), to link the payment to the license.
• The license key, the subscription status and the end date of the paid period.
• Activated devices: a random identifier generated on your computer the first time it runs, the computer name (the same one Windows displays), and the activation and last-seen dates. Alongside those go the plugin version and the version of Revit it is running in, which is how we know who needs to update and which Revit releases are worth supporting. Nothing you draw, no file name and no project content is sent.

The device identifier is a random number created locally. It is not a hardware fingerprint: we do not read disk, processor or motherboard serial numbers, or any characteristic of the machine. It exists only to honor the limit of 2 devices per subscription and to stop the same computer restarting the free trial indefinitely.

• Purpose: to operate the license, bill the subscription and provide support.
• Why we may do this: it is necessary to perform the contract you are party to.
• Sharing: with Stripe, to process the payment, and with the email delivery service, to send the license key and the sign-in link. We do not sell or hand your data to anyone else.
• Where it lives: in a Cloudflare database.

5. Signing in to your account

The customer area accepts two ways in, and neither uses a password. We do not create, ask for or store any password.

• Email link: you type your address and we send a sign-in link valid for a limited time and usable once. We store only a hash of the link, never the link itself.
• Sign in with Google: we ask Google only for your email address, and only to recognize which subscription is yours. We do not ask for your name, photo, contacts, calendar or any other data from your Google account.

6. Third-party services the page loads

The pages on this site, including this one, load everything from our own domain: text, styles and fonts. No third-party server is contacted while you browse them.

The exception is the PDF tools, which fetch their processing libraries from an external service. That means the service sees your IP address, as happens on any site:

• cdnjs (Cloudflare), the libraries that process PDFs inside your browser.

Those services receive only the request for the file. None of your documents pass through them.

7. Cookies and tracking

We measure audience in aggregate with Cloudflare Web Analytics: how many visits each page received, which country they came from, which browser, and how long the page took to load. That measurement uses no cookies, stores no identifier in your browser and does not follow you across sites.

Journey measurement, done by us. To learn where people drop off, we record which of our own pages you passed through: the home page, the plugin page, the click on the subscribe button, and the thank-you page. Each one counts once; reloading does not count again.

We also add up, separately, how many visits each page of the site received per day, the free tools included. That count is nothing but a number per page per day: it does not store the tab identifier, nor anything that would link one page to the next.

To link one step to the next, your browser tab holds a random number for as long as it stays open. It is not a cookie, it is not sent to anyone but us, it disappears when you close the tab, and it cannot be tied to your name, your email, or any other visit of yours. Alongside it we keep only the name of the ad or site that brought you, when there is one. We do not store your IP address or your browser in that record.

Meta pixel. This site loads the Meta pixel (Facebook and Instagram) to measure how our ads perform. It writes its own cookie in your browser and sends Meta three things: that you opened a page, that you opened the plugin page, and that you started a free trial. Along with it goes the page address, your IP and your browser, which is what any site receives from any visit.

This enables remarketing: if you visited and did not subscribe, you may see our ads again on Facebook or Instagram. We do not send Meta your name, your email or your license key, and we do not sell this data to anyone.

To turn it off: block third-party cookies in your browser, use a blocking extension, or adjust the ad preferences in your Meta account. The site works the same with the pixel blocked — nothing here depends on it.

8. Your rights

At any time you can ask us to confirm what we hold, to give you a copy, to correct it, to hand it over in a portable format, or to delete it, and you can withdraw your consent. Write to contato@nivelabim.com; we reply within 15 days.

Some data has to stay while your subscription is active, because without the license key and the device list the plugin cannot work. Deleting it means ending the subscription.

9. Changes to this policy

If anything changes in how the site handles data, we update this text and the date at the top of the page.