Privacy Policy — Bozzetto
Last Updated: January 1, 2026
1. Introduction
This Privacy Policy explains how Bozzetto ("the Add-in"), developed and published by AvantLeap ("we", "us", "our"), handles information when you install and use the Add-in within Autodesk® Revit®.
Bozzetto is a Revit add-in that generates C# Zero Touch Node (ZTN) source code for Dynamo using the Anthropic Claude API. All AI processing is performed by sending text you provide — node descriptions and existing C# files — directly from your machine to the Anthropic Claude API using an API key you supply. AvantLeap operates no backend infrastructure and receives none of this data.
By installing and using Bozzetto, you agree to the practices described in this policy. If you do not agree, do not install or use the Add-in.
2. Who Is the Data Controller
For the purposes of the General Data Protection Regulation (GDPR) and applicable data protection laws, AvantLeap is the data controller for any personal data processed by the Add-in.
Contact: Email: info@avantleap.com Website: https://www.avantleap.com
3. What Data the Add-in Processes
3.1 Data Stored Locally on Your Machine
When you use Bozzetto, the Add-in stores the following data on your machine only:
File location: %APPDATA%\AvantLeap\Bozzetto\settings.json
| Field | Description | Personal Data? |
|---|---|---|
| Claude API key | Your Anthropic API key, used to authenticate calls to the Claude API | No (account credential, not a name or identifier) |
| Default output folder path | Your preferred folder for saving generated ZTN packages | No |
| Node save path | Your preferred folder for saving node specification files | No |
| Dynamo version preference | Pre-fills version dropdowns in the UI | No |
| Revit target version preference | Pre-fills version dropdowns in the UI | No |
| Trial start date | Tracks the start of the 30-day free trial period | No |
None of the fields stored locally contain your name, email address, or any identifier that directly identifies you as a natural person.
To delete all locally stored data: delete %APPDATA%\AvantLeap\Bozzetto\settings.json.
3.2 Data Transmitted Externally
Anthropic Claude API
When you use AI-powered features, Bozzetto sends text data directly from your machine to the Anthropic Claude API using the API key you provide:
| Feature | Data sent to Anthropic |
|---|---|
| Build → Add Node → Enhance Prompt | Your plain-language node description |
| Build → Add Node → Generate Node | The enhanced node description and port specification |
| Build → Plan & Build → Propose Nodes | Your goal description |
| Improve → Optimize | The full contents of the C# source file you selected |
| Search → Why? | The package name, description, and your search query |
Who receives this data: Anthropic, PBC — not AvantLeap. This request goes directly from your machine to Anthropic's API. AvantLeap does not receive, store, log, or have access to any data you send to the Claude API.
Anthropic's privacy policy governs how Anthropic processes this data: https://www.anthropic.com/legal/privacy
Autodesk App Store Entitlement Check
When the App Store App ID is configured (after listing publication), Bozzetto calls the Autodesk App Store Entitlement API at Revit startup to verify your licence:
GET https://apps.autodesk.com/webservices/checkentitlement
?userid={AutodeskLoginUserId}
&appid={AppStoreAppId}
What is sent: Your Autodesk Account Login User ID (an anonymised identifier generated by Autodesk, not your name or email address) and the Add-in's App Store App ID.
Who receives it: Autodesk, Inc. — not AvantLeap. This request goes directly from your machine to Autodesk's servers. AvantLeap does not receive, log, or store the User ID or the entitlement response.
Result caching: The result is cached in memory for the duration of the current Revit session only. It is not written to disk.
Autodesk's privacy policy: https://www.autodesk.com/company/legal-notices-trademarks/privacy-statement
Dynamo Package Manager Search
When you use the Search Nodes feature, Bozzetto queries the Dynamo Package Manager public search endpoint:
GET https://www.dynamopackages.com/packages?search={query}&num=25
What is sent: Your search query text (plain language node description). No authentication or account identifier is sent.
Who receives it: The Dynamo Package Manager (operated by Autodesk). AvantLeap does not receive or log search queries.
3.3 Data We Do Not Collect
AvantLeap does not collect, receive, or have access to any of the following:
- Your name, email address, or Autodesk account details
- Your Revit project files or model data
- The C# code you generate, optimize, or migrate
- Analytics, telemetry, crash reports, or usage statistics
- IP addresses or location data
- Cookies or browser tracking of any kind
4. Legal Basis for Processing (GDPR)
| Processing activity | Legal basis |
|---|---|
| Storing the Claude API key and preferences in local settings.json | Legitimate interest — storing the API key locally enables the tool to function without requiring the user to re-enter it on every use. The key never leaves the user's machine except to Anthropic directly. |
| Transmitting node descriptions and C# code to the Anthropic Claude API | Contractual necessity — generating node code is the core function of the tool. The user initiates each API call explicitly and controls what data is sent. |
| Transmitting the Autodesk Login User ID to the Autodesk Entitlement API | Contractual necessity — verifying a valid purchase or subscription is a requirement of the Autodesk App Store distribution agreement. |
| Sending search query text to the Dynamo Package Manager | Legitimate interest — returning relevant search results is the core purpose of the Search Nodes feature. The user initiates each search explicitly. |
5. Data Storage and Security
All settings data created by the Add-in is stored exclusively on your local machine at %APPDATA%\AvantLeap\Bozzetto\settings.json. AvantLeap has no access to this data at any time.
The security of locally stored data is governed by:
- Your Windows user account permissions and file system access controls
- Your organisation's network and device security policies
The Claude API key stored in settings.json is readable by any process running under your Windows user account. It is not encrypted at rest. You are responsible for the security of your device and your Anthropic account.
Generated files (.cs, .csproj, pkg.json) are saved to folders you specify and are subject to the same local file system security.
6. Data Sharing
AvantLeap does not share, sell, rent, or disclose any data to any third party.
The external transmissions performed by the Add-in are:
- Text data sent to Anthropic for AI processing (initiated explicitly by the user for each AI feature)
- Autodesk Login User ID sent to Autodesk for entitlement verification (once per Revit session)
- Search query text sent to Autodesk (Dynamo Package Manager) for package search
None of these transmissions pass through AvantLeap systems or infrastructure.
7. Data Retention
The Add-in does not manage a data retention schedule. Data persists as long as you choose to keep it:
- Settings file (
%APPDATA%\AvantLeap\Bozzetto\settings.json) remains on disk until you delete it manually or uninstall and clean up. - Generated files remain in the output folders you specified until you delete them.
- In-memory entitlement result is discarded automatically when Revit closes.
- Trial start date in settings.json persists until you delete the file. Deleting the file resets the trial.
Uninstalling the Add-in removes the software but does not automatically delete settings.json or any generated files. You can delete them manually.
8. Your Rights Under GDPR
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding the personal data processed by the Add-in:
| Right | How to exercise it |
|---|---|
| Access | Because all settings data is stored locally, you can access it directly by opening %APPDATA%\AvantLeap\Bozzetto\settings.json. |
| Rectification | You can edit any field directly in the settings file or through the Settings window in Bozzetto. |
| Erasure | Delete %APPDATA%\AvantLeap\Bozzetto\settings.json to remove all locally stored data. |
| Restriction of processing | You can stop Bozzetto from sending data to Anthropic by removing your API key in Settings. The tool will not make Claude API calls without a valid key. |
| Portability | settings.json is a plain-text JSON file. You can copy or transfer it to another machine freely. |
| Object | You may object to the entitlement check by not using the App Store version of the tool during the entitlement verification period. |
Because AvantLeap does not hold or receive your data, requests for erasure or access cannot be fulfilled by contacting AvantLeap — the data is on your machine and under your control. For data processed by Anthropic, contact Anthropic directly. For data processed by Autodesk, contact Autodesk directly.
If you have a question about exercising your rights under this policy, contact us at info@avantleap.com and we will assist where possible.
9. International Data Transfers
Data sent to the Anthropic Claude API may be processed on servers located in the United States or other countries outside the EEA. Anthropic's privacy policy and terms of service govern this processing. By using the AI features of Bozzetto, you are subject to Anthropic's data transfer arrangements.
The Autodesk Login User ID sent to the Autodesk entitlement API is processed by Autodesk, Inc., a US-based company. Your Autodesk account agreement and Autodesk's Privacy Statement govern any cross-border transfer of that identifier.
AvantLeap does not transfer any data internationally.
10. Children's Privacy
Bozzetto is professional software designed for use in the Architecture, Engineering, and Construction industry. It is not intended for use by persons under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data through use of this Add-in, please contact us at info@avantleap.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where appropriate, notify users through the Autodesk App Store listing or our website. Continued use of the Add-in after a policy update constitutes acceptance of the revised terms.
12. Contact
For privacy questions, concerns, or requests:
AvantLeap Email: info@avantleap.com Website: https://www.avantleap.com
We aim to respond to all privacy-related enquiries within 10 business days.
Appendix — Technical Summary for Compliance Review
This appendix provides a concise summary for DPOs, IT security teams, and compliance reviewers.
| Topic | Detail |
|---|---|
| Software type | Revit add-in (.dll), installed locally on Windows machines |
| Personal data collected | None — no name, email, username, or direct identifier is stored locally or sent to AvantLeap |
| Data location | User's machine only (%APPDATA%\AvantLeap\Bozzetto\settings.json) — no AvantLeap cloud storage |
| External network calls | (1) Anthropic Claude API — text data per user action; (2) Autodesk Entitlement API — once per Revit session; (3) Dynamo Package Manager — per search query |
| Data sent to Anthropic | Node descriptions and C# file contents — sent directly from user's machine, not via AvantLeap |
| Data sent to Autodesk (entitlement) | Autodesk Login User ID (anonymised account identifier) + App Store App ID — to Autodesk, not AvantLeap |
| Data sent to Autodesk (search) | Search query text — to Dynamo Package Manager public endpoint, not AvantLeap |
| Analytics / telemetry | None |
| Crash reporting | None |
| Cookies | None |
| Third-party SDKs with data access | Anthropic SDK (Anthropic.SDK NuGet) — used to call the Claude API with the user's own key |
| GDPR legal basis | Legitimate interest (local settings storage, search) · Contractual necessity (Claude API calls, entitlement check) |
| Data controller | AvantLeap — info@avantleap.com |
| Data processor | None (no AvantLeap-operated processing infrastructure) |
| Sub-processors | Anthropic, PBC (Claude API — user-initiated, user-keyed) · Autodesk, Inc. (entitlement check + Package Manager search) |