Privacy Policy

1. Who we are

PermitMiner LLC ("PermitMiner," "we," "our," or "us") is a Utah limited liability company located at 2505 S River Rd, Unit #2 #224, St. George, UT 84790. We run a subscription service that collects building and construction permit records, and planning and development applications, published by Utah cities, counties, the State of Utah, and federal agencies, adds contractor and owner contact information from the sources described in Section 3, and shows those records to subscribers. Subscribers can send one-to-one outreach email through the Service, either from their own connected Gmail account or through our email provider. We also contact construction businesses ourselves to market PermitMiner.

This policy covers three groups of people: (1) subscribers and visitors to our website, (2) people whose information appears in permit records and our lead data, including owner-builders, and (3) people at businesses we contact to market PermitMiner.

People we invite to try the Service may see a limited preview before they sign up: a count of recent permits in one county and a few examples showing a contractor's business name, the type of work, the city, the issue date, a value range, and a partly hidden phone number. The preview never shows a street address, an email address, a property owner, or a full phone number.

This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our website and service (collectively, the "Service") or when your information appears in our records.

2. Information we collect

2a. Account information

When you create an account, we collect your name, email address, and a password (stored in hashed form). If you sign in through Google OAuth, we receive your name, email address, and profile picture from Google in lieu of a password. To prevent repeat free trials, we keep a one-way hash of your email address, and we keep it even after you delete your account.

2b. Payment information

Stripe, our payment processor, collects and stores your payment card details directly. We never receive your full card number or security code. We store your Stripe customer and subscription identifiers, your plan, billing interval, subscription status, and trial and renewal dates.

2c. Gmail authorization tokens

The Gmail connection is a limited beta. If you choose to connect Gmail, we ask Google for two permissions:

• gmail.send, which lets the Service send email from your Gmail address; and
• your email address, so we know which account you connected.

The gmail.send permission does not let us read, search, or delete your mail, and we do not. We store one encrypted refresh token so we can keep sending without asking you to sign in again, and we use it only to send the outreach emails you create or schedule in the Service.

We do not use information received from Google for advertising, do not sell it, and do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. No person at PermitMiner reads it except with your permission, where needed for security, or where the law requires.

When you disconnect Gmail in the Service, we ask Google to revoke our access and delete the stored token. We delete the token even if Google does not confirm the revoke. When you delete your account, we also ask Google to revoke our access, and we do not complete the deletion until Google confirms it or reports that the access was already revoked. If you revoke access from your Google account settings, sending stops, and we delete the unusable token when you disconnect or delete your account.

PermitMiner's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

2d. Usage and analytics data

We collect information about how you interact with the Service, including pages visited, features used, search filters applied, reports generated, and session duration. We use this data to improve the Service, diagnose technical problems, and understand usage patterns. We may use cookies, local storage, and similar technologies for this purpose, as described in Section 6.

2e. Communications

If you contact us by email or through a support channel, we retain the content of that correspondence and any information you choose to include.

3. Information about people who are not our subscribers

3a. What we collect and where it comes from

We collect:

• building and construction permit records, and planning and development applications, published by Utah cities, counties, the State of Utah, and federal agencies such as the U.S. Environmental Protection Agency;
• contractor license records published by the State of Utah;
• business listings from Google; and
• public business websites and the social media profile links they publish.

These records can include names, business names, license details, project addresses, phone numbers, email addresses, websites, and permit details. Some permits name an owner-builder, a private individual acting as their own builder. For owner-builders, the project address is often their home, and the phone number or email may be personal. Some permits name no contractor or owner-builder, or name only people whose contact details we do not keep. We show these to subscribers as early projects, without any person's name or contact details: the project address and city, the city's work type, the permit number, status and dates, and, where the city keeps one, a link to the city's record. On a home, the address is usually the homeowner's, so on a home's early project we do not show the city's description or project name, which can include the homeowner's name. The city's own record may show more.

3b. How we use and share it

We show this information to subscribers so they can offer construction-related goods and services for permitted projects. Subscribers can view it, export it, and use it to email or call. Our Terms and Acceptable Use Policy require subscribers to follow do-not-call, anti-spam, and privacy laws. We also use contractor information to market PermitMiner to construction businesses. Subscribers pay for access to the Service, and these records are part of it. We do not otherwise sell or rent this information.

3c. Your choices

To have your phone number and email address removed from the Service, email privacy@permitminer.com with your name, the address or permit number if you know it, and the phone number or email address to remove. If you are an owner-builder, we will also hide the permits that name you at the address or permit number you give us, including later permits at that address, so subscribers do not see those projects. If a permit at your home appears in the Service as an early project, meaning a permit the Service shows with no contractor, owner-builder or applicant, even if the city's own record names one, you can ask us to hide it without giving your name: email privacy@permitminer.com with the street address, including any unit number, and the city. We will hide the early projects at that address, including early projects from permits filed there later. This does not hide a permit at that address that the Service shows with a contractor, owner-builder or applicant. Within 30 days, we will act on the request in our lead reports, early projects, exports, new-lead emails sent after we record it, and the trial preview. We cannot recall emails already sent. We will also add those details to a suppression list so they are not added again from future records. We cannot change government records or recall copies a subscriber exported before your request. We may keep the minimum needed to honor the request.

To stop receiving a particular subscriber's emails, use the unsubscribe link in their message. To stop all email that subscribers send through our shared sending address, or to stop PermitMiner's own sales calls and emails, email privacy@permitminer.com or tell the caller. These requests take effect as soon as we record them. We record them no later than the next business day after we receive them.

4. How we use your information

We use the information we collect to:

• create and manage your account and authenticate you;
• process your subscription and trials through Stripe and send billing communications;
• deliver the Service, including permit records, contact details, and exports;
• send the outreach emails you create, through your connected Gmail account or through Resend;
• receive replies, detect opt-out requests, and forward replies to you;
• send transactional emails, such as account confirmations, trial and billing notices, and service notifications, through Resend;
• send you the new-lead emails described in our Terms;
• measure our advertising, as described in Section 6;
• prevent fraud and repeat free trials;
• monitor and improve the performance, security, and features of the Service;
• respond to your support requests and communications; and
• comply with applicable law, enforce our Terms of Service, and protect the rights and safety of PermitMiner, our users, and the public.

We do not sell or rent personal information about our subscribers.

We use the Google Ads tag only to measure ad clicks and signups. We have turned off ad personalization for that tag, so it is not used to build advertising audiences from your visits.

Section 3b covers how lead data is made available.

5. Third-party subprocessors

We share your information with the following categories of third-party service providers (subprocessors) that help us deliver the Service. Each is bound by its own privacy and security obligations.

We do not share your personal information with other third parties except as required by law, to protect our legal rights, or in connection with a merger, acquisition, or sale of assets, in which case we will notify you.

6. Cookies and tracking technologies

We use cookies and similar browser storage for these purposes:

• authentication cookies that keep you signed in (Supabase);
• local storage that remembers your filters and preferences; and
• the Google Ads tag, which sets cookies to record which ad brought you to our website and whether you then signed up. The tag does not load on our email preference pages.

You can block or delete cookies in your browser settings. If you do, you may not be able to stay signed in. You can manage ad personalization at https://adssettings.google.com. We do not currently respond to browser Do Not Track signals.

7. Data retention

You can delete your account at any time from your account page. Deletion cancels any subscription, revokes Gmail access, and deletes your account, profile, templates, send records, and opt-out lists from our active database. You can also ask us to delete your data by emailing privacy@permitminer.com, and we will complete the request within 30 days.

We keep:

• the one-way email hash described in Section 2a;
• billing records that Stripe holds and that tax law requires;
• copies in backups until they are overwritten on our providers' backup schedules; and
• message records that our email provider keeps under its own retention period.

We keep requests you send us by email to stop or change our emails, and our replies, for at least 3 years, including after an account is deleted.

Permit and lead records are kept independently of your account, subject to the removal rights in Section 3c.

8. Security

We implement industry-standard technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), encrypted storage of sensitive tokens, access controls, and use of established subprocessors with their own security programs. No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. In the event of a data breach that is required to be disclosed under applicable law, we will notify affected users as required.

9. Your rights

Depending on where you reside, you may have the following rights with respect to your personal information:

• Access: you may request a copy of the personal information we hold about you.
• Correction: you may request that we correct inaccurate or incomplete personal information.
• Deletion: you may request that we delete your personal information, subject to certain legal exceptions.
• Portability: you may request that we provide your personal information in a structured, machine-readable format.
• Opt-out of sale: we do not sell or rent personal information about our subscribers. Subscribers pay for access to the Service, which includes the lead records described in Section 3. If you are named in those records, you can have your phone number and email address removed, or stop contact, as described in Section 3c.

California residents and residents of other states with applicable consumer privacy laws (including the CCPA/CPRA and equivalent state statutes) have the rights described above. To exercise any of these rights, contact us at privacy@permitminer.com. We will respond within the timeframe required by applicable law (generally 45 days, with a possible extension).

We will not discriminate against you for exercising any privacy rights afforded to you by law.

10. Children

The Service is not directed to children under the age of 18 and we do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete it promptly. If you believe a child under 18 has provided us with personal information, please contact us at privacy@permitminer.com.

11. Geographic scope

The Service is operated from the United States and is intended primarily for users located in the United States. If you access the Service from outside the United States, be aware that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide additional notice, such as an in-app notification or an email to the address on your account. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

13. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle your information, please contact us at: