Privacy Policy

1. Introduction

PermitDue ("we", "us", "our") operates https://permitdue.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

• Account information: email address and password (hashed) when you create an account.
• Business information: business name, type, location (state and city), and permit details you enter.
• Payment information: processed securely by Stripe. We never store your full credit card number on our servers.
• Usage data: pages visited, features used, and device/browser information collected via Google Analytics (GA4).

3. How We Use Your Data

• Provide and maintain the permit tracking service, including generating your permit checklist and dashboard.
• Send email reminders about upcoming permit expirations and renewals via our email provider (Resend).
• Process subscription payments through Stripe.
• Improve the service through aggregated, anonymized usage analytics.

4. Third-Party Services

We rely on the following third-party processors, each with their own privacy policies:

• Supabase — authentication and database hosting.
• Stripe — payment processing. Subject to the Stripe Privacy Policy.
• Resend — transactional email delivery (renewal reminders, account notifications).
• Google Analytics (GA4) — website usage analytics. You can opt out by rejecting non-essential cookies.

5. Cookies

We use essential cookies required for authentication and site functionality. Non-essential cookies (Google Analytics) are only loaded after you consent via our cookie banner. You can change your preference at any time by clearing your browser's local storage.

6. Data Retention

We retain your account and business data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g., payment records for tax purposes).

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Export your data in a portable format.
• Object to processing of your data for analytics purposes.

To exercise any of these rights, email us at [email protected].

8. Data Security

We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and access controls. However, no method of transmission over the Internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at [email protected].