Privacy Policy

PermitsDone Effective Date: 2026-05-01 Last Updated: 2026-05-01

This Privacy Policy explains how PermitsDone LLC ("PermitsDone," "we," "us," or "our") collects, uses, discloses, and protects information when you use our website at permitsdone.com and our permit-filing platform (collectively, the "Platform").

PermitsDone provides permit-filing services to licensed roofing and solar contractors ("Contractors"). We do not offer services directly to property owners, though we process certain property owner information on behalf of Contractors.

If you have questions about this policy, contact us at privacy@permitsdone.com.

1. Information We Collect

1.1 Account and Business Information

When a Contractor creates an account, we collect:

• Full legal name and title
• Business name and entity type
• Business address (street, city, state, ZIP)
• Contractor license number and issuing jurisdiction
• Email address
• Phone number

1.2 Property and Project Information

For each permit filing submitted through the Platform, we collect:

• Property address (street, city, state, ZIP, parcel/lot number if provided)
• Scope of work (e.g., "roof replacement," "solar panel installation")
• Property owner name(s)
• Property owner phone number and email address
• Property owner signature (collected via DocuSeal e-signature platform)
• Date of planned work

1.3 Uploaded Documents

Contractors may upload documents to support permit applications, including:

• Photos of existing conditions (roof, structural damage, etc.)
• Insurance certificates
• Subcontractor agreements
• Existing permit records
• Other documents required by the AHJ

We store these files in Amazon S3 (via our hosting infrastructure).

1.4 Payment Information

We use Stripe, Inc. to process payments. When you make a payment, Stripe collects your card number, expiration date, and security code. We store only a tokenized reference, last four digits, and billing address. We do not store full card numbers.

1.5 Usage and Technical Data

When you use the Platform, we automatically collect:

• IP address
• Browser type and version
• Operating system
• Referring URL
• Pages visited and actions taken on the Platform
• Date and time of visits
• Session duration

1.6 Cookies and Tracking Technologies

We use cookies and similar technologies. See Section 4 for details.

1.7 Communications

If you contact us by email or through the Platform, we retain the content of those communications, including attachments.

2. How We Use Information

We use the information we collect to:

• Create and manage Contractor accounts
• Receive, prepare, and submit permit applications to the AHJ on behalf of Contractors
• Communicate with the AHJ (Tarrant County or other DFW jurisdictions) regarding submitted applications
• Forward PE-stamped application materials to PTOEDGE, our third-party professional engineering partner, when required
• Process payments and issue receipts
• Send Contractors status updates about their Projects via email (and, where applicable, SMS via Twilio)
• Use AI-assisted parsing (via Anthropic) to extract and validate data from uploaded documents and application forms
• Respond to support requests and inquiries
• Detect and prevent fraud, abuse, or unauthorized use of the Platform
• Maintain records required by law or regulation
• Improve the Platform and develop new features
• Run advertising and conversion tracking (see Section 4)
• Comply with legal obligations, including responses to valid legal process

3. How We Share Information

We do not sell your personal information. We share information only as described below.

3.1 Service Providers

We share information with third-party vendors who help us operate the Platform:

Each vendor is subject to contractual obligations regarding data security and use.

3.2 PTOEDGE (PE Engineering Partner)

When a project requires a PE-stamped application, we share the relevant application materials and property information with PTOEDGE, our third-party professional engineering partner, solely for the purpose of preparing the stamped application.

3.3 Tarrant County AHJ and Other Jurisdictions

We submit property information, contractor license information, Owner Authorization documents, and other application materials to the AHJ (currently Tarrant County, Texas, at https://www.tarrantcountytx.gov/en/engineering-services/permits.html) as part of the permit filing process. This is the core purpose of our service.

3.4 Legal Requirements

We may disclose information if required by law, court order, subpoena, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of PermitsDone, our users, or others.

3.5 Business Transfers

If PermitsDone is acquired, merged, or its assets transferred, your information may be transferred to the acquiring entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. Cookies and Analytics

4.1 Cookies We Use

• Essential cookies: Required for the Platform to function (authentication, session management).
• Analytics cookies: Used to understand how users interact with the Platform (page views, user flow). Currently we may use Google Analytics or equivalent.
• Advertising cookies: We use Google Ads conversion tracking to measure the effectiveness of our advertising. When you complete a signup or submit a project, a conversion event is sent to Google Ads. This data is used for ad optimization and is subject to Google's Privacy Policy.

4.2 Managing Cookies

You can disable cookies through your browser settings. Disabling essential cookies will impair Platform functionality. To opt out of Google Ads tracking, visit https://adssettings.google.com.

5. Data Retention

We retain data as follows:

• Account information: Retained while your account is active and for 3 years after closure, to support any post-service disputes.
• Permit project records, Owner Authorizations, and uploaded documents: Retained for 7 years from the date of project completion, to satisfy applicable tax, permit, and record-keeping obligations.
• Payment records: Retained for 7 years to comply with tax and financial record obligations.
• Usage logs: Typically retained for 90 days.
• Communications: Retained for 3 years.

After applicable retention periods, we will delete or de-identify your data, unless a legal hold requires longer retention.

6. Your Rights and Choices

[FOR ATTORNEY REVIEW -- confirm Texas Data Privacy and Security Act (TDPSA) applicability based on revenue/data volume thresholds; confirm CCPA applicability if California contractors are served; review whether PermitsDone qualifies as a "controller" vs. "processor" for property owner data]

6.1 Access and Correction

You may access or correct your account information by logging in or contacting privacy@permitsdone.com. We will respond within 30 days.

6.2 Deletion

You may request deletion of your personal information by contacting privacy@permitsdone.com. We will honor deletion requests subject to our legal obligations to retain certain records (see Section 5). Permit records and related documents may be required to be retained regardless of your request.

6.3 Texas Data Privacy and Security Act (TDPSA)

[FOR ATTORNEY REVIEW -- verify TDPSA threshold applicability; confirm controller/processor classification for property owner data; verify right to appeal procedures]

If the TDPSA applies to PermitsDone's processing activities, Texas residents have the right to:

• Know whether we process their personal data
• Access, correct, or delete personal data we hold
• Obtain a copy of their personal data in a portable format
• Opt out of targeted advertising (we do not sell data, but conversion tracking may be considered "targeted advertising" under the TDPSA)
• Appeal our response to any rights request

To exercise these rights, contact privacy@permitsdone.com.

6.4 California Residents (CCPA)

[FOR ATTORNEY REVIEW -- determine whether PermitsDone meets CCPA/CPRA thresholds; if so, add full CCPA disclosures]

If PermitsDone is subject to the California Consumer Privacy Act, California residents have additional rights including the right to know, delete, and opt out of the sale or sharing of personal information. Contact privacy@permitsdone.com to exercise these rights.

6.5 Property Owner Data

Property owner information is submitted by Contractors as part of their permit filing requests. Property owners who wish to access, correct, or delete their information should contact hello@permitsdone.com. We will work with the submitting Contractor to process such requests, subject to applicable legal retention requirements.

7. Children

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, contact privacy@permitsdone.com and we will delete it promptly.

8. Security

We implement commercially reasonable technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/HTTPS)
• Encryption of data at rest in Supabase and S3
• Access controls limiting employee access to personal data on a need-to-know basis
• Stripe PCI-DSS compliance for payment data
• Regular review of vendor security practices

No security measure is 100% effective. In the event of a data breach that creates a material risk to you, we will notify affected users as required by applicable law.

9. International Transfers

PermitsDone is a US-based service intended for use by US-based contractors filing permits in US jurisdictions. We do not intentionally transfer personal data outside of the United States. Our primary data processors (Supabase, Vercel, Render, Stripe) may operate infrastructure in multiple countries; to the extent any such transfers occur, they are covered by those vendors' standard contractual safeguards.

10. Third-Party Links

The Platform may contain links to third-party websites (e.g., the Tarrant County AHJ portal). We are not responsible for the privacy practices of those sites. Review their privacy policies before submitting information to them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top and, for material changes, notify you by email. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised policy.

12. Contact Us

For privacy questions, requests, or complaints:

PermitsDone LLC Email: privacy@permitsdone.com General inquiries: hello@permitsdone.com Website: permitsdone.com