Privacy Policy

The short version

PermitBase is a free, informational guide to building-permit requirements across the Mountain West, operated by Elevated Technologies LLC, a Utah limited liability company. We don't sell your data, we don't run advertising trackers, and we collect the bare minimum needed to run the site and send the updates you ask for.

What we collect

• Your email address — only if you submit it through one of our “Notify me” forms. We use it solely to send permit-related updates. We never sell or rent it.
• Checklist tool account data — if you sign in to save or purchase a permit checklist, we store your email address, a securely hashed password (we never store or see it in plain text), a session token, the jurisdiction/permit types you selected, and the checklist we generated for you. If you buy a Single checklist or a Pro subscription, Stripe handles your payment directly — we store only the Stripe customer and subscription IDs needed to know your plan is active, never your card number. If you describe your project in your own words to help us suggest permit types, that description is sent to Cloudflare's AI service to classify it; we don't store the text of your description ourselves afterward.
• Support chat messages — if you use the in-app support chat, we log your message and the AI-generated reply (tied to a chat session identifier, not your account) so we can review and improve answer quality. We delete these logs after 90 days. Don't include sensitive personal information in a support chat message. That free text is also sent to Cloudflare's Workers AI service to generate the reply, the same as project descriptions above.
• Anonymous usage analytics — we use Umami, a privacy-first analytics tool that does not use cookies and does not collect personally identifiable information. It tells us which pages are useful, not who you are.
• Standard server logs — our host (Vercel) keeps routine request logs (such as IP address and browser type) to operate and secure the site.

Permit-activity leads data

We are not currently collecting permit-activity leads data. If we launch this feature (a separate paid product, see Leads Data Terms), we would collect owner/applicant name and contact information, contractor name and license number, and project valuation — all published by the issuing jurisdiction's own public permit portal. That data would be shared only with paying leads-API subscribers, scoped to the tier (homeowner or contractor) they subscribed to, and never sold to data brokers or used for advertising on this site.

If we launch this feature and your information appears in this data, you can request it be removed by contacting permitbase@proton.me with your name, the affected jurisdiction, and the permit number involved, or via the opt-out process described in our Leads Data Terms. Removal would take effect immediately and retroactively across all past and future access.

Service providers

We rely on a few third parties to deliver the site. Each only receives the data needed for its function:

• Buttondown — email list management (stores your email if you subscribe).
• Umami — anonymous, cookieless analytics.
• Vercel — website hosting and delivery.
• Stripe — payment processing for checklist purchases and Pro subscriptions (handles your card details directly; we never see them).
• Cloudflare — hosts our checklist tool's backend and database. Its Workers AI service classifies a project description you enter into likely permit types, and generates replies in the in-app support chat.
• Resend — sends account emails (email verification, password reset, requirement-change alerts).

Your choices

Every email we send includes a one-click unsubscribe link, and you can unsubscribe at any time. To ask what data we hold about you, or to have it deleted, email us at permitbase@proton.me and we'll take care of it.

Changes to this policy

If we change how we handle data, we'll update this page and the “last updated” date above.