Privacy Policy

PermitNotice ("we," "us," or "our") operates the website at permitnotice.com and provides a subscription-based service that monitors publicly available building permit data and delivers alerts to subscribers. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

By using PermitNotice, you agree to the collection and use of information described in this policy. If you do not agree, please discontinue use of our service.

01 Information We Collect

We collect information you provide directly to us and information generated through your use of the service.

Information you provide:

• Name and email address when you create an account
• Billing information (credit/debit card details) processed securely through Stripe — we do not store full card numbers
• Alert preferences, coverage area locations, and radius settings you configure
• Communications you send us, including support requests

Information collected automatically:

• Log data including IP address, browser type, pages visited, and timestamps
• Device information such as hardware model and operating system
• Usage data including features accessed and alerts viewed
• Cookies and similar tracking technologies (see Section 5)

Public permit data: Our service aggregates publicly available building permit records from county and municipal government portals. This data belongs to government entities and is available to the general public. We process and enrich this data to deliver our service.

02 How We Use Your Information

We use the information we collect to:

• Create and manage your account and deliver the subscription service
• Send permit alert emails and SMS notifications based on your preferences
• Process payments and send billing-related communications
• Respond to your questions and provide customer support
• Send service-related announcements such as maintenance notices or policy updates
• Monitor and improve the performance, security, and reliability of our platform
• Comply with applicable legal obligations

We do not use your data to train machine learning models or sell aggregated behavioral profiles to advertisers.

03 Information Sharing

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

• Service providers: We use trusted third-party services to operate the platform, including Stripe (payment processing), Supabase (database hosting), Resend or SendGrid (email delivery), and Twilio (SMS). These providers are contractually obligated to protect your data and may not use it for their own purposes.
• Legal requirements: We may disclose information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our legal rights or the safety of users.
• Business transfers: If PermitNotice is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

04 Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data is retained while your subscription is active and for up to 90 days after cancellation, to allow for account reactivation
• Billing records are retained for seven years as required by applicable tax and accounting laws
• Alert history and permit data associated with your account is retained for 12 months from creation
• Log data is retained for 90 days and then automatically deleted

You may request deletion of your account and associated personal data at any time by contacting us. Upon deletion, we will remove your data within 30 days, except where retention is required by law.

05 Cookies & Tracking

We use cookies and similar technologies to operate and improve our service. The types of cookies we use include:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled without affecting core functionality.
• Preference cookies: Store your settings such as dismissed notifications and display preferences.
• Analytics cookies: Help us understand how the service is used so we can improve it. We use privacy-focused analytics that do not track you across other websites.

You can control cookie settings through your browser preferences. Note that disabling essential cookies may prevent you from signing in or using core features of the service.

06 Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• All data is transmitted over encrypted connections (TLS/HTTPS)
• Database access is restricted by role-based permissions and is not publicly accessible
• Payment data is handled entirely by Stripe, a PCI-DSS compliant payment processor — we never see or store full card numbers
• Passwords are hashed and salted using industry-standard algorithms
• We conduct regular security reviews of our infrastructure

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

07 Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Opt-out of marketing: Unsubscribe from promotional emails at any time using the link in any email we send. Note that transactional and service emails (billing receipts, alert digests) cannot be disabled while your account is active.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@permitnotice.com. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

If you are located in California, you have additional rights under the California Consumer Privacy Act (CCPA). If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR). Please contact us to learn more about rights specific to your jurisdiction.

08 Children's Privacy

PermitNotice is a professional business intelligence service intended for adults. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided us with personal information, we will delete that information promptly.

If you believe a minor has provided us with personal information, please contact us at privacy@permitnotice.com.

09 Third-Party Links

Our service may contain links to third-party websites, including links to county permit portals and government data sources. These sites are not operated by us and are not subject to this Privacy Policy.

We encourage you to review the privacy policies of any third-party sites you visit. We have no control over and assume no responsibility for the content, privacy practices, or policies of third-party sites or services.

10 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to all active subscribers at least 14 days before the changes take effect
• Display a notice within the application

Your continued use of PermitNotice after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, please cancel your account before the effective date.

11 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving any concerns promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.