Privacy Policy

1. Data we collect

• Account data: Your name and email address. Sign-in credentials are handled by our authentication provider; we do not receive or store your password.
• Property search data: Addresses and locations you search for or analyze.
• Project data: Information you enter about development projects, including project type, size, budget, and uploaded documents.
• Submission data: Applicant name, email, phone, mailing address, and business name when you authorize a permit submission.
• Payment data: We use Stripe to process payments. We never see or store your full card number — Stripe handles all payment information securely.
• Usage data: Optional app analytics is off until accepted in the consent banner or Privacy Center. It covers approved feature-use events and may include session or account association, page paths, referral/campaign information and session timing. This preference does not control Base44's separate platform page-view/login tracking, session-recording settings, or necessary service and security logs.

2. How we use your data

• To provide property analysis, permit research, and development project tools.
• To review concierge service requests and, for separately accepted projects with your authorization and written agreement on scope, price, and estimated timing, prepare and file permit applications on your behalf.
• To send you confirmation emails, status updates, and important account notifications.
• To process subscription payments and manage your account.
• To improve our data accuracy, features, and user experience.
• To comply with legal obligations and prevent fraud or abuse.

3. Data we do not sell

We do not sell your personal data to third parties. We do not share your property search history or project data with marketers or advertisers.

4. Data sharing

We share data only when necessary to provide our services:

• Stripe — processes your payments and manages subscriptions.
• County and state agencies — when filing a separately accepted concierge project under your authorization, we send the necessary applicant and project information to the relevant jurisdiction. Sending a service request alone is not confirmation that an application has been filed.
• Service providers — hosting, email, analytics, maps, and property-data services receive information needed for the features you use, subject to their applicable service terms and privacy policies.
• AI-assisted answers — when you use the property question-and-answer feature, your question and relevant property-report context are sent to AI processing providers to generate a response. Avoid including unnecessary sensitive information in your questions. AI-generated answers may be incomplete or inaccurate and require independent verification.
• Legal compliance — if required by law, court order, or to protect our rights or safety.

5. Data retention

Account and saved research records are retained to provide your service. You can request account deletion through Settings, but this does not guarantee that every uploaded file, provider record, service log, or retained copy is erased. Some records require separate removal or retention review. Shared property-source caches may be retained for reuse. Cache freshness windows vary by source and data type; expiration of a freshness window does not mean the stored record is deleted. Contact us about a broader access or deletion request and any applicable retention exceptions.

6. Data security

We use the safeguards described here. Data is sent over encrypted (HTTPS) connections. API keys are stored only in a one-way hashed form. We also use per-account access controls, temporary account lockout after repeated failed sign-ins, request limits, and monitoring of security events. Stored data is not end-to-end encrypted, so our hosting provider's authorized staff may be able to access it if needed. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable safeguards.

New project and permit document uploads are stored privately. Viewing a file in the app checks access to its saved document or project and creates a download link valid for five minutes. Authorized administrators retain access for service delivery. Anyone holding a temporary download link can use it until it expires; do not share it with unauthorized people.

White-label report logos are stored using permanent public links, rather than private document storage. Anyone holding a logo link can open it. Removing or replacing a logo in your branding settings does not revoke an earlier public link; contact us about storage removal.

Documents you submit to a government agency are also subject to that agency's access and retention practices.

7. Your rights

• Access & export: The Privacy Center lets signed-in users download a readable PDF with their profile and summaries of saved properties, reports and development projects, rather than the underlying technical data archive. The download includes project document metadata, not file contents, separate permit-workspace records, platform logs or payment-provider records. This saved-research export is not a complete privacy-request export.
• Correction: You can update your account information and project details at any time.
• Deletion: You can request account deletion through Settings. Deleting your account cancels active subscriptions immediately. Deletion is not a refund request. Uploaded storage objects, payment-provider records and retained platform logs may require separate removal or retention review; account deletion does not guarantee every copy is erased. Shared property cache records may be retained to serve other users.
• Opt-out: Use an unsubscribe link where provided, or contact us to request that non-essential emails stop. Necessary account, payment, security, and requested-service messages may continue. Optional app analytics preferences can be changed separately in the Privacy Center.

8. Children's privacy

Permit Pathfinder is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us so we can review and remove it.

9. Changes to this policy

We may update this policy as our services evolve. When we do, we will update the "Last updated" date on this page and may also notify you by email or a notice in the app. Continued use after changes constitutes acceptance.

10. Contact

Questions about this policy or your data? Email contact@permitpathfinder.com.