FAQ - What does LightStanza do with my data?

At LightStanza, we believe that modern lighting design shouldn't require sacrificing security. As a cloud-based photometric software platform, our mission is to empower you with fast, accessible workflows while keeping your data safe, private, and fully under your control. Here are the answers to your most common questions about how we handle your project data.

What data is transmitted when I use the Revit plugin?

We only extract the information that is absolutely necessary to run your lighting calculations.

• What is sent: Geometry, materials, room and space names, IES files, some project information files, and some fixture family data. The project address is also included to ensure we can determine accurate locations for daylight studies.

• What is NOT sent: We never upload your client name, project number, sheet and view names, or work-sharing and user metadata.

• Privacy Tip: If your project address is highly sensitive, you can manually delete it from the Project Information in Revit before exporting to LightStanza. If needed, the address can simply be added back into the LightStanza project after importing.

  
  

• Note: When you are working outside of Revit, we only access the specific files that you explicitly upload directly to the platform.

  
  

Who owns my data?

You do. You retain all right, title, and interest to any 3D models, project files, geometry, or IES files that you upload to the platform.

Where is my data stored, and how long do you keep it?

• Storage Location: All customer data is hosted securely within US-based regions on the Google Cloud Platform.

  
  
• Retention: Your data will persist for the duration of your LightStanza subscription unless you choose to delete it. A project can be deleted manually at any time.   Local archives can be saved as backups.

• After Cancellation: If your subscription ends, your data will be saved should you choose to return in the future.  If this applies to your situation please coordinate with support@LightStanza.com to ensure your data is retained until you reactivate the subscription.

• On-Demand Deletion: If you have strict confidentiality requirements for a specific client, you can request full deletion of a project's data at any time, completely independent of your contract status.

How secure is my data in the cloud?

As a modern cloud-based software company, we take security incredibly seriously.

• Compliance: LightStanza is SOC 2 Type II compliant.

• Encryption & Isolation: Your data is encrypted in transit using industry-standard protocols. We also maintain strict isolation controls to prevent cross-customer data access.

• Authentication: We support standard username and password logins, as well as Single Sign-On (SSO) options through Google and Microsoft.

Can I control who sees what inside my firm?

Yes! While all projects are available to all team members by default, you can adjust the permission settings on specific projects and folders so that only authorized users can access them.

What happens when an employee leaves our firm?

Because LightStanza utilizes individual, per-user accounts, a departing team member's access can be easily disassociated by an account administrator. When you remove a user from your team, you will receive a prompt allowing you to easily re-assign their projects to another active team member, ensuring that your firm's work is preserved seamlessly.

What is your incident response and disaster recovery plan?

• Breach Notification: In the unlikely event of a security incident, LightStanza has a documented incident-response process. Relevant customers, users, affected parties, and regulators will be notified within 72 hours of discovery.

• Backups: We maintain a formal Business Continuity and Disaster Recovery plan and perform an annual test that includes backup restoration. Critical data is backed up to alternate locations. For our core services and Google Datacenters, we maintain a Recovery Time Objective (RTO) of 2 hours and a Recovery Point Objective (RPO) of 15 minutes.

• Outages & Acquisitions: If a service outage occurs, we will make every effort to resume your in-progress calculations once service is restored, though a restart may occasionally be required. Finally, in the event that the company is ever acquired or dissolved, your calculations will not be disrupted.