Skip to main content

Data privacy

What permit data we store​

Permit Radar pulls permit records from the jurisdictions you've linked. Specifically, on each fetch we capture:

  • Permit numbers, statuses, application dates, and review timelines
  • Project addresses and descriptions
  • Plan reviewer assignments and review outcomes
  • Inspection schedules and outcomes
  • Submittal and fee records

This is the same data you can see by logging into the jurisdiction's portal yourself.

Why we need portal credentials​

Most jurisdiction portals expose a public, anonymous view that's limited. Logging in surfaces a much more detailed record: per-cycle review timelines, reviewer assignments, comments left on submittals, fee breakdowns, inspection schedules, and whether a review came back with corrections. That deeper data is what makes Permit Radar useful, so we sign in as you to capture it.

We use the same credentials you'd use to view the portal yourself, and only access the records the jurisdiction grants your account.

How we store portal credentials​

When you link a jurisdiction, you provide the username and password Permit Radar uses to log into that portal on your behalf.

  • The password is encrypted with AES-256-GCM before it leaves the browser tab and is written to the database. The encryption key is held only in our production environment — it is never stored next to the encrypted data.
  • The credential is decrypted only at the moment of a scheduled fetch, and never sent back to a browser. The Permit Radar UI never displays your password.
  • You can revoke access at any time from Company Settings → Linked Jurisdictions. Revoking deletes the encrypted credential and unsubscribes your company from future fetches for that jurisdiction.

Sharing​

We do not sell, rent, or share your data with third parties. We do not use your data to train our AI models without your consent.

Deletion​

To delete your company account, email matt@permit-radar.com. We will:

  1. Delete every linked credential
  2. Delete every permit, review, and inspection record scraped on your company's behalf
  3. Delete the user accounts associated with your company