Legal
Privacy Policy
PermitZero is a B2B tool for HVAC contractors. This policy explains the small amount of data we collect about you (the contractor) and how we handle the public property records that power the weekly brief.
1. Data about contractors (our customers)
What we collect
- Account: name, work email, company. Sign-in is by emailed magic link, we store no passwords.
- Billing: handled by our payment processor; we store only the last four digits and the renewal date.
- Usage:which leads you’ve opened, basic page analytics, and error logs, used to improve the product.
How we use it
To deliver the brief, bill your subscription, send service emails (new brief ready, billing receipts, security notices), and improve the model and product.
What we don’t do
We don’t sell your account data, share it with other contractors, or use it to target advertising.
2. Data about homeowners (lead data)
Every lead in the brief is derived from public Travis County records, deeds, assessor data, and similar sources that any member of the public can request. We add modeling on top (scoring, signal grouping, estimated equipment age) but we do not enrich leads with data from consumer data brokers, social media, or behavioral tracking.
You may use leads to contact homeowners about HVAC services. You may not use them for any purpose governed by the Fair Credit Reporting Act, and your outreach must comply with TCPA, CAN-SPAM, and the Texas DNC list.
3. Cookies & tracking
We use a single first-party session cookie to keep you signed in and a privacy-respecting analytics tool to count page views. No third-party advertising cookies. No cross-site tracking.
4. Sharing
We share data only with the service providers that run our infrastructure, hosting, email delivery, payment processing, and error monitoring, each under a data processing agreement. We will disclose data if compelled by valid legal process.
5. Retention
Account data is kept while your subscription is active and for 12 months after cancellation (for billing and dispute records). Usage logs are kept for 90 days. You can request earlier deletion at any time.
6. Your rights
You can access, correct, export, or delete your account data by emailing privacy@permitzero.com. Texas residents have rights under the Texas Data Privacy and Security Act; we honor those requests for everyone, regardless of state.
7. Security
Sign-in is passwordless. Data is encrypted in transit and at rest. Access to production systems is limited to the founder and is gated by hardware-key 2FA.
8. Changes
Material changes to this policy will be announced in the brief and by email at least 14 days before they take effect.
9. Contact
Privacy questions: privacy@permitzero.com. General questions: contact us.