1. Who we are
AutoPermit ("AutoPermit," "we," "us") provides permit operations software for contractor teams. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and application (the "Service").
2. Information we collect
Account and workspace data
- Name, email address, and authentication credentials (via Supabase Auth)
- Organization name, settings, timezone, and team membership
- Billing status and plan tier when you subscribe (processed by Lemon Squeezy)
Permit operations data
- Jobs: titles, client details, site addresses, AHJ names, permit numbers, statuses, notes
- Documents you upload (stored via Cloudinary): file names, URLs, metadata
- Extracted and reviewed fields from documents (may be assisted by AI providers)
- Ledger status, readiness scores, portal check timestamps, submission artifacts
- Audit logs, status history, and in-app notifications
Technical and usage data
- Log data, IP address, browser type, and device information
- Error and performance diagnostics (e.g., Sentry, when enabled)
- Cookies and similar technologies required for authentication and security
3. How we use information
We use information to:
- Provide, maintain, and improve the Service
- Authenticate users and enforce organization boundaries
- Process document uploads, extractions, readiness rules, and exports you request
- Send operational alerts and support communications
- Process subscriptions and prevent fraud
- Comply with law and protect the security of our systems and users
We do not sell personal information. We do not use your permit data to train public AI models.
4. Legal bases (EEA/UK users)
Where applicable, we rely on: performance of a contract (providing the Service), legitimate interests (security, product improvement), and consent where required (e.g., optional marketing emails). You may withdraw consent at any time.
5. Sub-processors
We use third-party providers to operate the Service. They process data only on our instructions and for the purposes described below:
- Supabase — authentication and database hosting
- Vercel — application hosting and delivery
- Cloudinary — document storage and delivery
- Groq — document field extraction (when you run extraction on uploads)
- Lemon Squeezy — subscription billing and payment processing
- Sentry — error monitoring (when configured)
A current list of sub-processors is available on request at hi@getautopermit.com.
6. Data retention
We retain workspace data while your account is active. After cancellation, we may retain data for a limited period for backup, legal, or dispute resolution purposes, then delete or anonymize it unless law requires longer retention. You may export ledger data via CSV before closure.
7. Security
We implement organizational and technical measures appropriate to B2B SaaS, including access controls, organization-scoped queries, encryption in transit (HTTPS/TLS), and audit logging. See our Security page for more detail. No method of transmission is 100% secure.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact hi@getautopermit.com. We will respond within the timeframe required by applicable law.
9. International transfers
If you access the Service from outside the United States, your data may be processed in the US or other countries where our providers operate. We use appropriate safeguards (such as standard contractual clauses) where required for cross-border transfers.
10. Children
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.
11. Changes
We may update this policy. We will post the revised version with a new "Last updated" date. Material changes may be notified via email or in-app notice.
12. Contact
Contact: hi@getautopermit.com