Privacy Policy

1. Overview

This Privacy Policy explains what information PermitAIO collects when you use permitaio.com and the PermitAIO web application (the “Service”), how we use it, and the choices you have. It applies to contractor teams, their employees, and visitors to our marketing site.

2. Information we collect

• Account information — name, work email, password (stored as a salted hash), organization name, and role.
• Job and business data — job numbers, client names and addresses, floor plans, window and door schedules, permit and inventory records, HOA requirements, and documents your organization uploads or generates through the Service.
• Usage data — pages visited, features used, device and browser type, and approximate location inferred from IP address, used to keep the Service secure and to understand how it's used.
• Cookies — used to keep you signed in and remember preferences such as light/dark mode. We do not use third-party advertising cookies.

3. How we use information

We use collected information to: provide and maintain the Service; authenticate accounts and enforce organization-level access controls; generate permit packages, forms, and reports you request; provide customer support; monitor for security issues and abuse; and improve the Service. We do not sell personal information.

4. How information is stored and protected

Job and account data is stored with our database and authentication provider, Supabase, using row-level security policies that keep each organization's data isolated from every other organization. The application is hosted on Vercel. Data is encrypted in transit via HTTPS. Passwords are never stored in plain text.

5. Who can see your organization's data

Job data, floor plans, permit records, and documents you create are visible only to members of your organization, scoped by the role your organization's Owner or Admin assigns (Owner, Admin, or Member). PermitAIO staff may access data only to provide support you request or to investigate a security or technical issue, and never to use it for marketing to your customers.

6. Data sharing

We share information only with service providers that help us operate the Service (such as our hosting and database providers), and only to the extent needed for them to perform that function. We may disclose information if required by law or to protect the rights, property, or safety of PermitAIO, our customers, or others.

7. Data retention

We retain account and job data for as long as your organization has an active subscription, plus a reasonable period afterward to allow data export or reactivation. You can request deletion of your organization's data by contacting us.

8. Your choices

You can review and update your account information from Settings at any time. Organization Owners can export or request deletion of their organization's data by contacting us at the email below.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

10. Contact

Questions about this Privacy Policy or your data can be sent to support@permitaio.com.