Privacy Policy

1. Introduction

Permitrust ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, or utilize our permit intelligence services (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Personal Information You Provide

We may collect the following types of personal information that you voluntarily provide to us:

• Contact Information: Name, email address, phone number, mailing address
• Property Information: Property address, parcel numbers, property characteristics
• Account Information: Username, password, account preferences
• Payment Information: Credit card details, billing address (processed by third-party payment processors)
• Project Information: Details about your construction project (sheds, garages, decks, fences, etc.)
• Communication Data: Messages, inquiries, feedback, support requests

2.2 Information Automatically Collected

When you use our Services, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, clicks, scroll behavior, referral URLs
• Location Data: Approximate geographic location based on IP address
• Cookies & Similar Technologies: See Section 6 for details

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Public records and government databases (property records, building department data)
• Payment processors (Stripe, PayPal, etc.)
• Analytics providers (Google Analytics, etc.)
• Social media platforms (if you interact with us on social media)

3. How We Collect Information

We collect information through the following methods:

• Direct Interactions: When you create an account, purchase services, fill out forms, or contact us
• Automated Technologies: When you interact with our website, we automatically collect Technical Data and Usage Data
• Third Parties: We may receive information from analytics providers, payment processors, and public databases
• Cookies: We use cookies and similar tracking technologies (see Section 6)

4. How We Use Your Information

We use your information for the following purposes:

5. Sharing Your Information

We do not sell your personal information. However, we may share your information in the following circumstances:

5.1 Service Providers

We may share your information with third-party vendors who perform services on our behalf, including:

• Payment processors (Stripe, PayPal)
• Cloud hosting providers
• Analytics providers (Google Analytics)
• Email service providers
• Customer support platforms

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government investigations).

5.3 Business Transfers

If Permitrust is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Cookies & Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience. Cookies are small text files placed on your device.

Types of Cookies We Use

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View cookies stored on your device
• Delete all cookies
• Block cookies from specific websites
• Block all cookies

Please note that disabling cookies may affect the functionality of our Services.

7. Data Security

We implement reasonable and appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Encrypted storage of sensitive information
• Regular security assessments and penetration testing
• Access controls and authentication protocols
• Secure data centers with physical security measures
• Employee training on data protection practices

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:

• Providing our Services to you
• Complying with legal obligations (tax, accounting, regulatory requirements)
• Resolving disputes and enforcing agreements
• Legitimate business purposes (improving Services, analytics)

Retention periods vary based on the type of information and applicable laws. Generally:

• Account information: Retained as long as your account is active
• Transaction records: Retained for 7 years (tax/accounting requirements)
• Usage data: Retained for up to 24 months
• Communications: Retained for up to 3 years

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal information (subject to exceptions)
• Right to Object: Object to processing of your information for certain purposes
• Right to Restrict Processing: Request restriction of how we use your information
• Right to Data Portability: Request transfer of your information to another service
• Right to Withdraw Consent: Withdraw consent where processing is based on consent
• Right to Opt-Out of Marketing: Unsubscribe from marketing communications

To exercise these rights, please contact us at support@permitrust.com. We will respond within 30 days.

10. CCPA Privacy Rights (California Residents)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom we share information
• Right to Delete: Request deletion of personal information collected from you (subject to exceptions)
• Right to Opt-Out: Request to opt-out of the sale of personal information (WE DO NOT SELL YOUR DATA)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Correct: Request correction of inaccurate personal information

Categories of Personal Information Collected (CCPA)

To exercise your CCPA rights, contact us at support@permitrust.com. We will verify your identity before responding.

11. GDPR Privacy Rights (European Economic Area)

If you are in the EEA, you have the following rights under GDPR:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making and profiling

Legal Bases for Processing (GDPR)

We process your personal information under the following legal bases:

• Performance of a Contract: To provide our Services to you
• Legal Obligations: To comply with tax, accounting, and legal requirements
• Legitimate Interests: To improve our Services, prevent fraud, and ensure security
• Consent: For marketing communications (you may withdraw consent at any time)

Right to Lodge a Complaint

You have the right to lodge a complaint with your local supervisory authority if you believe our processing of your personal information violates GDPR.

12. Children's Privacy

13. Third-Party Links

Our Services may contain links to third-party websites, products, or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites you visit.

14. International Data Transfers

Permitrust is based in the United States. Your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using our Services, you consent to the transfer of your information to the United States.

For EEA residents, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

15. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Our Services do not currently respond to DNT signals. We continue to evaluate DNT and similar technologies.

16. Email Communications

We may send you the following types of emails:

• Service Emails: Important notices about your account, transactions, or service updates (cannot opt out)
• Marketing Emails: Promotional offers, newsletters, and updates (opt-out available)

You can opt out of marketing emails by clicking the "unsubscribe" link at the bottom of any marketing email or by contacting us at support@permitrust.com.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending an email notification (for material changes)

Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

19. California Notice at Collection

As required by the CCPA, at or before the point of collection, California residents have the right to receive notice of the categories of personal information collected and the purposes for which they are used.

We collect the following categories of personal information for the business purposes described in Section 4:

• Identifiers (name, email, IP address)
• Customer Records (phone, address, payment info)
• Commercial Information (purchases, project details)
• Internet Activity (browsing history, interactions)
• Geolocation Data (approximate location)
• Inferences (preferences, profiles)

We do not sell personal information. We do not use sensitive personal information for purposes other than those permitted by law.

For questions, contact support@permitrust.com.

20. Nevada Privacy Rights

Nevada residents have the right to request that we not sell their personal information. We do not sell personal information. To submit a request, contact support@permitrust.com.

21. Virginia Consumer Data Protection Act (CDPA)

Virginia residents have the following rights under the CDPA:

• Right to confirm whether we process personal information
• Right to access personal information
• Right to correct inaccuracies
• Right to delete personal information
• Right to obtain a copy of personal information (data portability)
• Right to opt out of targeted advertising
• Right to opt out of the sale of personal information
• Right to opt out of profiling for legal or similarly significant decisions

To exercise these rights, contact support@permitrust.com.

22. Colorado Privacy Act (CPA)

Colorado residents have similar rights under the CPA, including the right to:

• Access and portability of personal information
• Correction and deletion
• Opt out of targeted advertising, sale, and profiling

Contact support@permitrust.com to exercise your rights.

23. Connecticut Data Privacy Act (CTDPA)

Connecticut residents have the rights to access, correct, delete, and obtain a copy of their personal information, as well as opt out of processing for targeted advertising and sale. Contact support@permitrust.com to exercise your rights.

24. Utah Consumer Privacy Act (UCPA)

Utah residents have the rights to confirm whether we process personal information, access their information, delete their information, and obtain a portable copy. Utah residents also have the right to opt out of targeted advertising and sale of personal information. Contact support@permitrust.com to exercise your rights.