Privacy Policy

Last updated: 11 June 2026

cobiereport.app is operated by Jarre Dev CommV, Belgium (VAT BE0794224518), which is the data controller for the processing described here. Questions or requests: info@jarre.dev.

1. Your IFC models never reach us

The converter runs entirely in your browser. The IFC file you drop is parsed on your own machine and is not uploaded, stored or seen by us. The COBie workbook is also generated in your browser. When you download a gap report PDF or save a report, your browser sends us only the derived summary: facility name, schema version, element counts per COBie sheet, and the gap analysis (fill rates, missing-field counts, readiness score). No geometry, no property data beyond those aggregates.

2. What we collect

Account data — email address and optional name, via our authentication provider, used to sign you in and contact you about your account. Saved reports — the summary data described above, plus the name you give a report. Billing data — subscription status and a customer reference at our payment provider; card details go directly to Stripe and never touch our systems. Usage data — a monthly counter of free reports, used to enforce the free-tier limit, and anonymous, cookieless page analytics (aggregate page views and Web Vitals via Vercel Web Analytics — no cross-site tracking, no advertising identifiers).

The legal bases under the GDPR are performance of our contract with you (accounts, reports, billing) and our legitimate interest in operating and improving the service (security logs, aggregate analytics). We do not sell personal data and we do not use it for advertising.

3. Processors

We share data only with the processors needed to run the service: Clerk (authentication), Stripe (payments), Neon (database hosting, EU region) and Vercel (application hosting and cookieless analytics). Each processes data on our instructions under a data processing agreement. Some processors are US companies; transfers rely on the EU–US Data Privacy Framework and standard contractual clauses.

4. Retention

Account data and saved reports are kept while your account exists and deleted when you delete your account (or on request). Billing records are kept as long as Belgian tax law requires. Aggregate analytics contain no personal data.

5. Your rights

EU/EEA users can ask for access, correction, deletion, restriction and portability of their personal data, and can object to processing based on legitimate interest. Email info@jarre.dev and we will respond within 30 days. You can also complain to the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).

6. Cookies

We use only the cookies required to keep you signed in (set by our authentication provider). There are no advertising or cross-site tracking cookies, which is why there is no cookie banner.

7. Changes

Material changes to this policy will be announced on this page before they take effect, and by email for subscribers when the change affects them.

8. Contact

Jarre Dev CommV · VAT BE0794224518 · Belgium · info@jarre.dev