Privacy Policy

1. Introduction

PermitCycle ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and browser extension.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• First and last name
• Phone number (optional)
• Company name (optional)
• Professional license number (optional)
• Specialization (optional)
• Profile picture (optional)

Project Data

When you create and manage projects, we collect:

• Project names and descriptions
• Property addresses (street, city, state, ZIP code)
• City permit/case numbers
• Task information and assignments
• Inspection records

Files and Documents

We store files you upload to the platform, including PDFs and images related to your permit applications. We track file names, sizes, upload dates, and version history.

Usage Data

We automatically collect certain information when you use our services:

• IP address
• Browser type and version (user agent)
• Activity logs (actions performed within the application)
• Login timestamps

3. Browser Extension

The PermitCycle browser extension collects additional data to provide permit status updates:

• Authentication tokens: The extension reads your authentication cookie to communicate with our servers. This token is used for authentication only and is not stored separately by the extension.
• Permit portal content: The extension scrapes permit application status, review comments, and inspection results from city government portal websites. This information is sent to and stored in your PermitCycle account.
• Extension settings: Your extension preferences (such as maximum parallel tabs) are stored locally in your browser and are not transmitted to our servers.

4. How We Use Your Information

We use the information we collect to:

• Provide and maintain our permit tracking services
• Process and manage your permit applications
• Send you notifications about permit status updates
• Enable collaboration with team members on projects
• Send transactional emails (password resets, invitations, verification)
• Improve and optimize our services
• Detect and prevent fraud or abuse

5. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Team members: Project information is shared with team members you invite to collaborate on projects.
• Service providers: We use third-party services to operate our platform (see Section 10).
• Legal requirements: We may disclose information if required by law or to protect our rights and safety.

6. Data Security

We implement appropriate security measures to protect your information:

• Authentication is handled securely through trusted OAuth providers (Google)
• All data transmission is encrypted using HTTPS/TLS
• Session management uses secure JWT tokens with expiration
• Access to user data is restricted and logged

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time. Some information may be retained as required by law or for legitimate business purposes.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Update or correct your account information
• Delete your account and associated data
• Export your data
• Opt out of non-essential communications

To exercise these rights, please contact us at support@permitcycle.com.

9. Cookies

We use cookies to maintain your authentication session. Specifically, we use an "accessToken" cookie that contains your encrypted authentication token. This cookie is essential for the application to function and cannot be disabled while using our services.

10. Third-Party Services

We use the following third-party services:

• Google OAuth: For authentication. Google receives your email address to verify your identity.
• Resend: For sending transactional emails. Resend receives your email address and name to deliver emails.

11. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@permitcycle.com