VECTORWORKS PRIVACY STATEMENT

Effective Date: May 1, 2026

This Privacy Statement (“Statement”) applies to data collected by Vectorworks, Inc., its subsidiaries, and its affiliates (“Vectorworks,” “we,” “u,” or “our”) in connection with your use of: (i) websites operated, owned, or controlled by Vectorworks (“Websites”), each of our desktop software programs, including but not limited to Fundamentals, Architect, Design Suite, Landmark, Spotlight, Braceworks, ConnectCAD, and Vision (“Software”), our mobile applications, including but not limited to Vectorworks Nomad, Vectorworks Remote, Vectorworks Odyssey, Morpholio Trace, Morpholio Board, and Morpholio Journal mobile applications, (collectively, “Applications”), our cloud services (“Cloud Services”), and Vectorworks Service Select (“Service Select“) (collectively, the Services”). The Services may have been purchased or licensed by you, your educational institution, or your company (“Company”) for use by Company employees, students, consultants, and/or contractors (“Users”). Vectorworks is committed to protecting the privacy of all Users in compliance with all pertinent laws and regulations.

If you have any questions or concerns about our use of your personal information, then please contact us using the contact details provided at the bottom of this Privacy Statement.

Privacy Protections for Minors

We do not knowingly collect any personal information from children under the age of 16. If we learn we have collected or received personal information from a child under 16 years old without verification of parental consent, we will delete that information. We comply with applicable privacy laws governing the processing of minors’ personal information. For Users under the age of 18, we do not knowingly: (i) sell personal information; (ii) share personal information for cross-context behavioral advertising; (iii) engage in targeted advertising; or (iv) process personal information for profiling in furtherance of decisions that produce legal or similarly significant effects.

Where required by applicable law, we also apply additional safeguards to the collection, use, and disclosure of personal information of users under 18.

Information Collection

The personal information we collect from you, either directly or indirectly, will depend on how you interact with us and with the Services. “Personal information” is information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. We collect personal information about you from the following different sources:

Information That You Provide Directly

We will collect personal information directly from you, such as when you register an account with us, order a contract from Vectorworks, subscribe to marketing communications from us, interact with us at events or on social media, complete our surveys, visit us and/or contact us.

Information That We Collect Automatically (Including Via Cookies) or Generate

When you use the Services we may collect certain information automatically from your device, including your computer's IP address or MAC ID, your user name, device type, software license ID, serial number, contract ID, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with the Services, including the pages accessed, links clicked and frequency of use. In some countries, including the UK and countries in the European Economic Area (“EEA”), this information may be considered personal information under applicable data protection laws. We may also generate personal information such as analysis of your use of the Services.

Collecting and generating this information enables us to better understand the users of the Services, where they come from, and what content of the Services is of interest to them and provide customized content to them. We use this information for our internal analytics purposes, to improve the quality and relevance of the Services to its users and identify or remedy potential threats to the security of the Websites.

Some of this information may be collected using cookies and similar tracking technology (collectively, “Cookies”). Cookies are also used in connection with the Services for strictly necessary purposes; and subject to your preferences, for targeting, functional purposes and performance purposes. For further information about the types of Cookies we use on the Site, why, and how you can control Cookies, please see our Cookie Statement.

If you use Dropbox, Google Drive, or OneDrive integration, we may temporarily store a copy of your file by transferring it to servers associated with the Vectorworks Cloud Services for processing. This temporary file is then deleted.

Information That We Obtain From Third Party Sources

We may collect personal information from third parties when you choose to login to the Platform with your Google, Apple or Facebook account. Please review the relevant Facebook, Apple and/or Google privacy notice for more information on their information and data protection practices.

We may also collect personal information from our group companies, in particular Bluebeam, Inc. (“Bluebeam”), when we integrate with their services. Bluebeam's privacy policy is available here.

We will receive personal information from Vectorworks Distribution and Resale Partners if you contracted for our Services through them. We may also receive personal information from them where you have been in discussion with them about the Vectorworks' Services where they have your consent to do so or are otherwise legally permitted.

From time to time, we may receive personal information about you from third party sources (including marketing agencies), but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal information to us. The types of information we collect from such third parties include analytics reports and market research surveys and we use the information we receive from these third parties to conduct internal research about your use of the Services, measure the performance of marketing campaigns for the Services and better understand your preferences in order to and customize our marketing campaigns and Services accordingly.

Categories of Personal Information We Collect

The table below describes the categories of personal information that we process about you and the relevant sources for each category.

Personal Information Categories

Source

Identity and Contact Data
such as your name, email address, telephone number and billing and delivery address.

Directly from you
Third Parties (in particular Vectorworks Distribution and Resale Partners)

Account Data
such as your login information (email and password) and account preferences.

Directly from you

Third-Party Login Data
such as a third-party account ID/name/social media handle and log in details when you choose to login to the Platform via third parties such as with your Google, Apple or Facebook account.

Third parties

Commercial Data
such as information regarding your orders and use of our products and services, your subscription plans, your product/service preferences, the products and services you have expressed interest in and your event participation.

Directly from you
Automatically/Generated

Financial Data
such as your payment details relating to your orders and purchases of our products and services, including payment method, payment amount and truncated credit or debit card details. We have limited access to and do not store your credit or debit card details (which are processed by payment service providers, such as Stripe).

Directly from you
Third parties

Communication Data
such as your feedback and other communications with us.

Directly from you
Third parties

Advertising and Marketing Data
such as third party analytics reports, your interests based on your use of our Services, other websites and online services, your purchases, survey responses (including third party market research surveys), competitions/promotions you enter, and marketing preferences.

Directly from you
Automatically/Generated
Third parties

Device Data collected from and/or stored on your device (including by means of Cookies), including computer's IP address or MAC ID, your username, device type, software license ID, serial number, contract ID, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. See our Cookie Statement for further details and how to control Cookies.

Automatically/Generated

Usage Data that we capture using Cookies such as how your device has interacted with the Services, including the pages accessed, links clicked and frequency of use. See our Cookie Statement for further details about Cookies used on our Websites and how to control Cookies.
Regarding our Software and Applications, subject to your preferences (which can be changed under the preferences settings) we may collect:
Verbose Usage Data includes all menu and tool click behaviors in the application, as well as system information such as operating system, processor, graphics card, and RAM.
Light Usage Data includes actions such as opening and closing the application, and some system information such as operating system, processor, graphics card, and RAM.

Automatically/Generated

Crash Log Data includes application data, diagnostics, and crash logs. See our Cookie Statement for further details and how to control Cookies used on our Site. You can control Crash Log Data usage on our Software and Applications, via the preferences settings.

Automatically/Generated

Geolocation Data such as your precise physical location or movements.

Automatically/Generated
Directly from you

How We Use Your Personal Information

Purpose/Activity

Type of Personal Information

Lawful Basis for Processing
(EEA/UK requirement - see further details below)

Register your account on our Services, to manage and administer your account and to facilitate your purchases and subscriptions.

Identity and Contact Data
Account Data
Third-Party Login Data
Commercial Data
Communication Data
Device Data
Financial Data

Performance of a contract with you.

Provide and deliver the Services, including delivery of products, electronic receipts and returns information, warranty and repairs.

Identity and Contact Data
Account Data
Third-Party Login Data
Financial Data
Communication Data
Commercial Data
Device Data
Crash Log Data

Performance of a contract with you.

Process transactions (via payment service providers such as Stripe) and transaction fee recovery.

Identity and Contact Data
Account Data
Third-Party Login Data
Financial Data
Communication Data
Commercial Data
Crash Log Data

Performance of a contract with you.

Respond to your communications, send you service updates, confirmations, invoices, technical notices, updates, security alerts, support and administrator messages.

Identity and Contact Data
Account Data
Third-Party Login Data
Financial Data
Commercial Data
Communication Data
Device Data
Usage Data
Crash Log Data

Performance of a contract with you.
Otherwise, as necessary for our legitimate interests (to operate, provide and improve our business to communicate with you) – where our communications are not necessary to perform or enter into a contract with you.

Reviewing communications with you for customer support and quality assurance and training purposes, and related record keeping.

Identity and Contact Data
Account Data
Third-Party Login Data
Commercial Data
Communications Data
Device Data
Usage Data
Crash Log Data

Necessary for our legitimate interests (to operate, provide and improve our business; to communicate with you) – where our communications are not necessary to perform or enter into a contract with you.

Keep our business, including our Services, and our employees, customers, vendors, and visitors secure and address threats to their safety or the safety of others; to detect and prevent fraud (online and in store). For example, our service providers such as Amazon Web Services and Stripe carry out certain security monitoring to help keep our platform secure.

Identity and Contact Data
Account Data
Financial Data
Third-Party Login Data
Commercial Data
Device Data
Usage Data
Communications Data
Crash Log Data

Necessary for our and our third parties' legitimate interests (to operate and provide our business, including our Services; to detect or prevent illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers, vendors, and visitors).

To administer and maintain our Services and our IT systems (including monitoring, troubleshooting, data analysis, testing, system maintenance, repair and support, reporting and hosting of data).

Identity and Contact Data
Account Data
Third-Party Login Data
Financial Data
Device Data
Usage Data
Crash Log Data

Our legitimate interests to operate, provide and improve our business, including our Services; to detect or prevent Illegal activities (e.g. fraud) and/or to manage the security of our IT infrastructure.

Analyze Usage Data, market research and surveys, in order to improve our Services and to develop new products and services.

Account Data
Third-Party Login Data
Device Data
Usage Data
Advertising and Marketing Data
Communication Data

Consent.
Otherwise, our legitimate interests to operate, provide and improve our business, including our Services, to improve our Services or use the insights to improve or develop marketing activities and promote our products and services.

Analyze data for advertising and marketing purposes.

Account Data
Third-Party Login Data
Commercial Data
Device Data
Usage Data
Communication Data
Marketing Data

Consent.
Otherwise, our legitimate interests (to operate, provide and improve our business, including our Services, to improve our Services or use the insights to improve or develop marketing activities and promote our products and services).

Contact current and prospective customers (including Website, Application, Cloud Services, and Service Select visitors) about our products and services, promotions, competitions and events we think may be of interest, including our newsletter and other promotional mailers and electronic communications.

Account Data
Third-Party Login Data
Usage Data
Marketing Data
Communication Data

Consent (where required under applicable law).
Otherwise, our legitimate interests (to operate, provide and improve our business; to communicate with you and to develop marketing activities and promote our products and services).

Personalize and customize your experience.

Account Data
Third-Party Login Data
Marketing Data
Usage Data
Device Data

Consent (where required under applicable law).
Otherwise, our legitimate interests (to operate, provide and improve our business, including our Services, to use the insights to improve or develop marketing activities and promote our products and services).

Personalize, target, and deliver advertising for our products and services on third party websites, apps, and other online services (including to identify audiences and individuals like you to better tailor our marketing campaigns and communications), and measure the effectiveness of our campaigns and adjust our methods.

Account Data
Third-Party Login Data
Marketing Data
Usage Data
Contact Device Data

Consent (where required under applicable law).
Otherwise, our legitimate interests (to improve our business, to promote our products and services and to use the insights to improve or develop our marketing activities).

Administer sweepstakes, competitions or surveys

Identity and Contact Data
Account Data
Third-Party Login Data
Communication Data

Contract- to comply with the terms of service of the sweepstake/competition/survey.
Our legitimate interests (to drive customer engagement and to collect user perceptions and measure satisfaction).

Comply with legal and regulatory obligations to which we are subject, including our obligations to respond to your requests under data protection law.

Identity and Contact Data
Account Data
Third-Party Login Data Administer sweepstakes, competitions or surveys Commercial Data
Usage Data
Communication Data
Crash Log Data

Legal obligation (including our obligations under GDPR and UK GDPR).

Protect our legal rights (including where necessary, to share information with law enforcement and others), for example to defend claims/actions or prospective claims/actions against us and to conduct litigation to defend our interests.

All data types

Our legitimate interests to protect our business interests.

In addition to the foregoing, we may may use your personal information as otherwise permitted by applicable law.

Sharing Information

Vectorworks may disclose your personal information to the following categories of recipients:

  • to our group companies (see further details here), who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Websites);
  • to third party services providers who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Websites).
  • to our partners, such as our carefully selected marketing partners (such as HubSpot and SalesForce) and where relevant to our network of distributors and dealers (listed here), who process personal information for purposes that are described in this Privacy Statement or as otherwise notified to you when we collect your personal information;
  • to advertising partners (i.e., Google Ads) for the sharing of app install and subscription conversion events from the Morpholio Trace application for advertising measurement and/or campaign optimization who process uploaded first-party customer information to serve as audience signals for Google App Install campaigns;
  • to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, including through a sale in connection with bankruptcy, provided that we inform the buyer it must use your personal information only for the purposes disclosed in this Privacy Statement;
  • to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation,(ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
  • to any other person with your consent to the disclosure.

If you use Dropbox integration, your files are stored with Dropbox. Please review the Dropbox privacy policy for more information on its information practices.

If you use Google Drive integration, your files are stored with Google Drive. Please review the Google Drive privacy policy for more information on its information practices.

If you use OneDrive integration, your files are stored with OneDrive. Please review the OneDrive privacy policy for more information on its information practices.

Legal Basis for Processing Personal Information (Where The Law of The UK or a Country Within The EEA Applies)

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only (i) where we have your consent to do so, (ii) where we need the personal information to perform a contract with you, or (iii) where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to collect and process your personal information (such as your marketing preferences). In very unusual circumstances we may need to process your personal information to protect your vital interests or those of another person for instance if they were relevant to prevent a serious crime/harm to an individual.

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information).

Similarly, if we collect and use your personal information in reliance on our legitimate interests (or those of any third party), we will make clear to you at the relevant time what those legitimate interests are.

We provide in the “How we use your personal information” section above more granular information about what legal bases we rely on for certain purposes.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the “Contact us” heading below.

Keeping Personal Information Secure

We use appropriate technical and organizational measures to protect the personal information that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

International Data Transfers

Your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country.

Specifically, our Website servers are located in the United States (as well as within the EEA), and our group companies and third-party service providers and partners operate around the world. This means that when we collect your personal information we may process it in any of these countries.

However, we have taken appropriate safeguards to require that your personal information will remain protected in accordance with this Privacy Statement and applicable law, such as the following safeguards for EEA/UK protected personal information:

  • Adequacy: Where we transfer your personal information to countries or organizations outside of the EEA and the UK, which have been formally recognized as providing an adequate level of protection for personal information, we rely on the relevant “adequacy decisions” from the European Commission and “adequacy regulations” from the Secretary of State in the UK. In particular, we may disclose personal information to organizations in the US that have adequacy status by virtue of being certified under the EU-US Data Privacy Framework, the UK extension and Swiss-US DPF.
  • Standard Contractual Clauses: (i) the European Commission's Standard Contractual Clauses as issued on 4 June 2021 and (ii) the UK International Data Transfer Addendum using in particular module 1 (for controller to controller transfers) and module 2 (for controller to processor transfers).

Data Retention

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymous it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Your Data Protection Rights

You have the following data protection rights:

  • If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by emailing us at privacy@vectorworks.net.
  • In addition, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by emailing us at privacy@vectorworks.net. Objecting to the processing of your personal information may prevent or otherwise affect the use of the Services.
  • You have the right to opt-out of marketing (including marketing communications we send you) at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please email us at privacy@vectorworks.net.
  • Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
  • You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the EEA, Switzerland, UK and certain non-European countries (including the US and Canada) are available here.)

The applicability of some rights depends on the circumstances, including where you reside. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

Third Party Links

For your convenience, the Services may contain certain hyperlinks to other websites. We make no promises, warranties, or guarantees regarding data collection on the hyperlinked pages that are not owned by Vectorworks. We recommend that you read the privacy policy/statement for each website you visit.

Your State Privacy Rights

Depending on your state of residency within the United States, you may have certain rights related to your personal information, including:

  • Access and Data Portability. You may confirm whether we process your personal information and access a copy of the personal information we process. To the extent feasible, data will be provided in a portable format.
  • Correction. You may request that we correct inaccuracies in your personal information that we maintain, taking into account the information's nature and processing purpose.
  • Deletion. You may request that we delete personal information about you that we maintain, subject to certain exceptions under applicable law.
  • Opt Out of Using Personal Information for Targeted Advertising, Profiling, and Sales. You may request that we do not use your personal information for these purposes.

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request.

To exercise any of these rights, please call us at: +1 (410) 290-5114, email us at privacy@vectorworks.net, or visit our Website. To appeal a decision regarding a consumer rights request, please contact us at privacy@vectorworks.net.

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data “sales” as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

Your California Privacy Rights

This section provides additional information for California residents as required by the California Consumer Privacy Act (“CCPA”).

Categories of Personal Information We Collect

We collect the following categories of personal information from California residents as defined by the CCPA:

Category

Examples

Collected

A. Identifiers.

A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.

YES

B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).

A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.

YES

C. Protected classification characteristics under California or federal law.

Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, reproductive health decision-making, military and veteran status, or genetic information (including familial genetic information).

NO

D. Commercial information.

Records of personal property, products, or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

YES

E. Biometric information.

Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

NO

F. Internet or other similar network activity.

Activity on our Websites, mobile apps, or other digital systems, such as internet browsing history, search history, system usage, electronic communications with us, postings on our social media sites.

YES

G. Geolocation data.

Physical location or movements.

YES

H. Sensory data.

Audio, electronic, visual, thermal, olfactory, or similar information.

YES

I. Professional or employment-related information.

Current or past job history.

YES

J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).

Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.

YES

K. Inferences drawn from other personal information.

Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

YES

L. Sensitive personal information.

Further identified in the chart below.

YES

Sensitive Personal Information

The chart below identifies which sensitive personal information categories we have collected from California consumers:

Sensitive Personal Information Category

Collected to Infer Characteristics?

L.1. Government identifiers, such as your driver's license, state identification card, or passport number.

NO

L.2. Account access credentials, such as usernames, account logins, account numbers, or card numbers combined with required access/security code or password.

YES

L.3. Precise geolocation, such as GPS data from a consumer's mobile device that can provide its location in a geographic area, with an approximate radius of 1,850 feet.

YES

L.4. Racial or ethnic origin.

NO

L.5. Citizenship or immigration status.

NO

L.6. Religious or philosophical beliefs.

NO

L.7. Union membership.

NO

L.8. Mail, email, or text messages not directed to the Company.

NO

L.9. Genetic data.

NO

L.10. Neural Data.

NO

L.11. Unique identifying biometric information.

NO

L.12. Health information.

NO

L.13. Sex life or sexual orientation information.

NO

L.14. Children's personal information (under age 16).

NO

Sensitive Personal Information Use and Disclosure Purposes

We use or disclose sensitive personal information for the following statutorily approved reasons (Permitted SPI Purposes):

  • Performing actions that are necessary for our consumer relationship and that an average consumer in a relationship with us would reasonably expect
  • Preventing, detecting, and investigating security incidents that compromise the availability, authenticity, integrity, or confidentiality of stored or transmitted personal information.
  • Defending against and prosecuting those responsible for malicious, deceptive, fraudulent, or illegal actions directed at Vectorworks.
  • Ensuring physical safety.
  • Short-term, transient use, such as non-personalized advertising shown as part of your current interactions with us.
  • Services performed for Vectorworks, including maintaining or servicing accounts, processing or fulfilling transactions, verifying consumer information, processing payments, or providing financing, analytic services, storage, or similar services.
  • Activities required to verify or maintain the quality or safety of a product, service, or device that we own, manufacture, had manufactured, or control.
  • Collecting or processing sensitive personal information that we do not use for the purpose of inferring characteristics about a consumer.

We do not use or disclose sensitive personal information for purposes other than the Permitted SPI Purposes.

Disclosing, Sharing, or Selling Personal Information

We may disclose the personal information we collect to service providers and contractors for the business purposes described in the How We Use Your Personal Information section above, such as to support our business functions.

We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, prohibit using the disclosed information for any purpose except performing the contract, and meet the CCPA's other contract requirements for engaging service providers or contractors.

The categories of personal information we disclosed to service providers or contractors for a business purpose over the preceding 12 months include:

  • Identity and Contact Data
  • Account Data
  • Third-Party Login Data
  • Commercial Data
  • Financial Data
  • Communication Data
  • Advertising and Marketing Data
  • Device Data
  • Usage Data
  • Crash Log Data
  • Geolocation Data

Personal Information Sales or Sharing: We do not sell your personal information to third parties. We may share your personal information with third parties for cross-context behavioral advertising purposes.

If you are a California resident, the CCPA grants you the following rights regarding your personal information:

  • Right to Know and Data Portability. You have the right to request that we disclose certain information to you about our collection and use of your personal information, including the specific pieces of personal information we have collected about you. You may exercise your right to know twice in any 12-month period.
    • Once we receive your request and confirm your identity, we will disclose to you:
      • The categories of personal information we collected about you and sources from which we collected your personal information.
      • The business or commercial purpose for collecting your personal information and, if applicable, selling or sharing your personal information.
      • If applicable, the categories of persons, including third parties, to whom we disclosed your personal information.
      • When your right to know submission includes a data portability request, a copy of your personal information, subject to any permitted redactions.
  • Right to Delete. You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions and limitations. Once we receive your request and confirm your identity, we will delete your personal information from our systems unless an exception allows us to retain it. We will also notify our service providers, contractors, and other recipients to take appropriate action.
  • Right to Correct. You also have the right to request correction of personal information we maintain about you that you believe is inaccurate. We may require you to provide documentation, if needed, to confirm your identity and support your claim that the information is inaccurate. Unless an exception applies, we will correct personal information that our review determines is inaccurate and notify our service providers, contractors, and other recipients to take appropriate action.
  • Right to Limit Sensitive Personal Information Use and Disclosure. As we do not use or disclose sensitive personal information beyond the CCPA's Permitted SPI Purposes, we do not currently provide this consumer right.
  • Right to Opt-Out of Personal Information Sales or Sharing. You have the right to request that we stop sharing your personal information for cross-context behavioral advertising purposes at any time, including through a user-enabled opt-out preference signal. We cannot share your personal information after we receive your request to opt-out unless you later consent to the sharing of your personal information.
  • Right to Non-Discrimination. You have the right not to be discriminated or retaliated against for exercising any of your privacy rights under the CCPA.

How to Exercise Your California Privacy Rights

Exercising the Rights to Know, Delete, or Correct. To exercise the right to know (including data portability), delete, or correct described above, please submit a verifiable request to us by either:

Exercising the Right to Opt-Out. You can submit your request to opt-out by:

You can also submit your request to opt-out of personal information sharing through an opt-out preference signal, as applicable.

Verification Process and Authorized Agents

Only you, or someone legally authorized to act on your behalf, may make a request to know, delete, or correct related to your personal information.

We cannot respond to your request to know, delete, or correct if we cannot verify your identity or authority to make the request and confirm the personal information relating to you. We will only use personal information provided in the request to verify the requestor's identity or authority to make the request.

We consider requests made through your password-protected account with Vectorworks sufficiently verified when the request relates to personal information associated with that specific account. You do not need to create an account with us to submit a request to know, correct, or delete.

For requests to opt-out, we ask for the information necessary to complete the request, which may include, for example, your name, email address, or account username.

Responding to Your Requests to Know, Delete, or Correct

We will confirm receipt of your request within ten business days. If you do not receive confirmation within the ten-day timeframe, please contact privacy@vectorworks.net.

We endeavor to substantively respond to a verifiable request within 45 days of its receipt. If we require more time (up to another 15 days), we will inform you of the reason and extension period in writing.

We will deliver our written response to your verified email address or password-protected account. Our substantive response will tell you whether or not we have complied with your request. If we cannot comply with your request in whole or in part, we will explain the reason, subject to any legal or regulatory restrictions.

Any disclosures we provide will cover information for the 12-month period preceding the request's receipt date. We will consider requests to provide longer disclosure periods that do not extend past January 1, 2022, unless providing the longer timeframe would be impossible or involves disproportionate effort.

For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Response and Timing on Rights to Opt-Out

In response to your request to opt-out, we will process your request, as soon as feasibly possible, but no later than 15 business days from the date we receive the request. You do not need to create an account with us to exercise your opt-out right.

We will only use personal information provided from your request to comply with the request. We will also notify our service providers, contractors, and certain other downstream recipients of your request to opt-out and instruct them to comply with your request and forward the request to their own downstream recipients, if applicable.

Once you make a request to opt-out, we will wait at least 12 months before asking you to reauthorize personal information sharing. However, you may change your mind and opt back in at any time by contacting us at privacy@vectorworks.net.

California Do Not Track

Vectorworks does not track its customers over time or across third party websites to provide targeted advertising and therefore does not respond to Do Not Track (DNT) signals. However, for certain mobile applications, we may share certain app usage data with advertising partners for advertising purposes as described in this Privacy Statement. California residents may opt out of this sharing using the in-app control described above. Some third party sites may track your browsing activities when they serve you content; most browsers allow you to set a DNT or GPC signal to indicate your preferences to those third parties.

Updates

From time to time, we may update this Privacy Statement in response to changing legal, technical or business developments. When we update our Privacy Statement, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Statement changes if and where this is required by applicable data protection laws. We encourage you periodically to check this Website to learn about the information we collect, use, and share.

Contact Us

For data subjects in the EEA and the UK, Vectorworks, Inc. is the controller of your personal information.

If you have questions or concerns about our use of personal information, you can contact us and our DPO at: privacy@vectorworks.net.