Permit Saige Privacy Policy

1. Introduction

This Privacy Policy explains how Permit Saige ("we," "us," "our") collects, uses, discloses, and protects personal information when you use our Services, including our AI-powered permit guidance tools, website, and applications.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, password.
• Project Information: Property addresses, project descriptions, construction details, permit application data.
• Documents: Building plans, permits, photos, and uploaded files.
• Payment Information: Billing address and payment method details (processed by third-party processors; we do not store full credit card numbers or CVV codes).
• Communications: Messages, feedback, and support requests.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, interaction patterns.
• Device Information: IP address, browser type, operating system, device identifiers, screen resolution.
• Location Data: General geographic location based on IP address.
• Log Data: Server logs, error reports, performance metrics.

2.3 Information from Third Parties

• Government Databases: Public property records, zoning information, permit requirements.
• Authentication Services: Profile information from Google, Facebook, or other login providers.
• Analytics Providers: Aggregated usage statistics and performance data.

2.4 Sensitive Personal Information

3. Legal Bases for Processing

Where required by law, we process personal information under the following legal bases:

4. How We Use Your Information

4.1 Service Delivery

• Process and manage permit applications.
• Provide AI-powered guidance and recommendations.
• Generate required documents and forms.
• Facilitate communication with government agencies.

4.2 Account Management

• Create and maintain accounts.
• Authenticate identity.
• Process payments and billing.
• Provide customer support.

4.3 Communication

• Send service updates and notifications.
• Respond to inquiries.
• Provide policy updates.
• Send educational content (with consent).

4.4 Improvement & Analytics

• Analyze usage patterns.
• Improve AI algorithms.
• Develop new features.
• Ensure platform security and stability.

4.5 Data Minimization & Purpose Limitation

5. AI and Automated Processing

5.1 How AI Uses Your Data

Inputs you provide may be processed by AI models to generate recommendations or documents. AI outputs may be stored as part of your project data.

5.2 Model Training

We do not use personal information to train publicly available AI models. If data is used to improve internal models, it is anonymized and aggregated.

5.3 Human Oversight

AI outputs may be reviewed by authorized personnel for quality assurance.

5.4 Rights Related to AI

Where required by law, you may request human review, object to automated processing, or request an explanation of AI-generated outputs.

6. Information Sharing and Disclosure

6.1 With Your Consent

For example, when submitting permit applications to government agencies.

6.2 Service Providers

We work with trusted third parties for hosting, payment processing, communication, analytics, and customer support. These providers are contractually required to protect your information.

6.3 Legal Requirements

We may disclose information in response to subpoenas, court orders, government requests, or to protect rights, safety, or property.

6.4 Business Transfers

Information may be transferred in the event of a merger, acquisition, or sale of assets.

6.5 Controller vs. Processor Roles

• We act as a data controller for account and platform data.
• We act as a data processor for project data handled on your behalf.

7. Data Security

We use industry-standard security measures, including:

• AES-256 encryption in transit and at rest.
• Multi-factor authentication and role-based access controls.
• Security assessments and vulnerability testing.
• SOC 2 compliant hosting.
• Employee security training.
• 24/7 incident monitoring and response.

8. Data Retention

9. Cookies and Tracking Technologies

We use essential, analytics, and preference cookies. Users may manage cookies through browser settings.

Do Not Track: We do not respond to Do Not Track signals.

10. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object, withdraw consent, or request portability of your data.

11. Data Subject Request Verification

We verify identity before fulfilling requests. Verification may include email confirmation, account authentication, or additional information.

Unauthorized requests will be denied.

12. Third-Party Services

Includes government portals, payment processors, and analytics providers. These services maintain their own privacy policies.

13. International Data Transfers

Your information may be transferred to the United States. We use Standard Contractual Clauses, adequacy decisions, and additional safeguards.

14. Children’s Privacy

15. Changes to This Policy

We may update this policy periodically. We will notify you via email, website notice, or in-app notifications. Continued use constitutes acceptance.

16. Contact Information