Privacy Policy

This Privacy Policy describes how PermitOS (“we,” “us,” or “our”) collects, uses, and discloses information when you use our website, applications, and related services (collectively, the “Service”).

PermitOS is a decision-support platform for permit precheck, zoning guidance, correction workflows, and human-led review support.PermitOS does not approve permits and does not replace any authority having jurisdiction.

We collect information you provide directly, information generated as you use the Service, and a limited set of technical signals from your device. Categories are described in the following sections.

• Name, work email, and password credentials.
• Organization name and role within an organization workspace.
• Profile preferences, such as notification and display settings.

• Project metadata such as address, parcel, scope, and status.
• Workspace membership and assigned roles.
• Internal notes, comments, and collaboration history.

You may upload permit packages, drawings, calculations, applications, and supporting materials. Uploaded permit documents may include sensitive project information such as site plans, owner details, structural details, and contractor information.

You are responsible for confirming you have the right to upload any document you submit, and for redacting information you do not wish to share with collaborators on your workspace.

When you contact us through the website, sales intake form, or support channel, we collect the message contents, your contact details, and any context you choose to share so we can respond.

• Pages and features accessed within the Service.
• Approximate location derived from IP address.
• Device, browser, operating system, and language settings.
• Diagnostic logs used to investigate errors and abuse.

We use a small number of strictly necessary cookies for sign-in, security, and core functionality. Other categories are off until you opt in. See our Cookie Policy for details, and use cookie settings to change your choices.

• Provide, maintain, and secure the Service.
• Process precheck reviews and generate decision-support outputs.
• Communicate about your account, projects, and support requests.
• Detect, investigate, and prevent abuse, fraud, and security incidents.
• Comply with applicable legal obligations.

PermitOS uses automated processing, including AI models, to read uploaded documents and produce checks, summaries, and suggested corrections. AI outputs are decision-support only and must be reviewed by qualified humans before action is taken.

Specific model providers, retention windows, and training-use terms must be reviewed and disclosed for this workspace before launch launch.

• With members of your organization workspace, based on assigned roles.
• With service providers acting on our behalf, under contract.
• When required by law, court order, or to protect rights and safety.
• In connection with a merger, acquisition, or asset transfer, with notice where required.

A list of subprocessors used to operate the Service must be reviewed and published before production launch. Until then, treat this section.

Specific retention periods for account data, project data, uploaded documents, and audit logs must be defined for this workspace before launch.

We implement reasonable technical and organizational measures appropriate to the sensitivity of the information processed.

PermitOS does not currently claim any specific compliance certification. Any certification, attestation, or formal data processing addendum will be disclosed here only after it is actually in place.

• Update profile and notification preferences from your account settings.
• Request export or deletion of account data through legal@PermitOS.co.
• Manage cookie categories using cookie settings.

You can manage marketing email categories at any time on the email preferences page, or unsubscribe using the link included in any marketing email. Transactional emails related to account security and active projects are not opt-out.

The Service is intended for professional and organizational use and is not directed to children under 16. We do not knowingly collect personal information from children.

If you access the Service from outside the operating jurisdiction of PermitOS, your information may be transferred to and processed in other countries. The specific transfer mechanisms must be reviewed for this workspace before launch launch.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page and, where appropriate, by additional notice.

For privacy questions, contact legal@PermitOS.co.