Privacy Policy

This policy explains what Permitly collects, why, and the control you have over it. We sell nothing to advertisers and we do not use your compliance documents to train AI models.

What we collect

• Account data — name, email address, and authentication identifiers.
• Business data — business name, industry, addresses, operating states, contact details.
• Compliance records — licenses, permits, certifications, insurance policies, inspections, projects, tasks and the documents you upload.
• Notification preferences — the email addresses and phone numbers you ask us to alert.
• Operational logs — activity history, alert delivery records and error diagnostics.

How we use it

• To run the Service: store your records, calculate compliance scores and generate reports.
• To send the reminders and digests you configure.
• To extract fields from documents you explicitly submit to AI import.
• To secure accounts, prevent abuse and troubleshoot problems.

Who we share it with

Only the processors required to operate the Service:

• Hosting and database — application hosting with encrypted storage and row-level access control.
• Stripe — payment processing. Card details go to Stripe, never to us.
• Brevo — transactional email and SMS delivery.
• AI provider — only the specific document or question you submit to an AI feature.

We do not sell personal information or share it for advertising.

Security

• Data is encrypted in transit and at rest.
• Every table enforces row-level security so records are visible only to your business's members.
• Uploaded documents are served through short-lived signed links, never public URLs.
• Access changes are recorded in your Activity Log.

Retention

We keep your data while your account is active. After cancellation we retain it for 30 days so you can export or reactivate, then delete it. Invoicing records are kept as long as tax law requires.

Your rights and data deletion

You can, at any time:

• Export — download CSV and PDF copies of your records from the Audit Center and Activity Log.
• Correct — edit any record directly in the app.
• Delete individual records — delete licenses, permits, documents and other items in-app; deletion is immediate and permanent.
• Delete everything — email support@usepermitly.org from your account address with the subject "Data deletion request". We verify ownership, confirm within 5 business days, and permanently erase your business, documents, records and account within 30 days. Cancellation of billing happens at the same time.

Children

Permitly is a business tool and is not directed at anyone under 16.

Changes

We will announce material changes in-app or by email before they take effect.

Contact

Privacy questions: support@usepermitly.org.