Privacy Policy
Last Updated: February 14, 2026 | Effective: February 14, 2026
Umbra Global LLC ("Umbra Global," "we," "our," or "us") operates PermitWise, a permit tracking and compliance management platform available via web application at permitwise.app and mobile applications on iOS and Android (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, retain, and protect your information when you use the Service.
By accessing or using PermitWise, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.
1. Information We Collect
1.1 Information You Provide Directly
| Category | Examples |
|---|
| Account Information | First name, last name, email address, phone number, password (hashed) |
| Business Information | Business name, DBA name, EIN, business address, operating cities, vehicle details, insurance information, primary vendor type |
| Permit & Compliance Data | Permit numbers, issue and expiry dates, permit statuses, jurisdiction details, inspection records, compliance checklists |
| Uploaded Documents | Permit documents, insurance certificates, inspection reports, business licenses, and other files you choose to upload |
| Event Information | Events you create, attend, or track, including event names, locations, dates, vendor applications, and compliance readiness data |
| Payment Information | Subscription plan selection and billing details. Payment card information is processed exclusively by Stripe, Inc. — we never store, access, or process your credit card numbers |
| Communications | Messages you send to our support team, feedback, and feature suggestions |
1.2 Information Collected Automatically
- Device Information: Browser type and version, operating system, device type, screen resolution, and unique device identifiers
- Usage Data: Pages visited, features used, time spent on the Service, click patterns, and navigation paths
- Log Data: IP address, access times, referring URLs, and error logs
- Cookies & Similar Technologies: Session cookies for authentication, preference cookies, and analytics cookies (see Section 9)
1.3 Information from Third Parties
- Publicly Available Regulatory Data: We collect permit requirement information from government websites, municipal databases, and public regulatory sources to build our permit type database
- Payment Processor: Stripe provides us with transaction confirmations, subscription status, and billing events (but never your full card number)
2. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis |
|---|
| Providing and operating the Service (permit tracking, document storage, reminders, compliance tools) | Performance of contract |
| Processing subscriptions and payments | Performance of contract |
| Sending transactional communications (renewal reminders, expiration alerts, event notifications, account verification) | Performance of contract |
| Sending optional SMS notifications (if enabled by you) | Consent |
| Improving, debugging, and optimizing the Service | Legitimate interest |
| Responding to support requests | Legitimate interest |
| Ensuring security and preventing fraud | Legitimate interest |
| Complying with legal obligations | Legal obligation |
We never sell, rent, or trade your personal data to third parties for marketing or advertising purposes.
3. How We Share Your Information
We may share your information only in the following limited circumstances:
- Service Providers: Cloud hosting (Railway, AWS), email delivery (SendGrid), SMS delivery (Twilio), and payment processing (Stripe). These providers are contractually bound to use your data only to provide services to us.
- Event Organizers: If you apply to or are accepted to an event through PermitWise, limited business and compliance information (business name, permit status for required permits) may be shared with the event organizer. You initiate this sharing by applying to their event.
- Team Members: If you add team members to your business account, they may access shared business data, permits, and documents in accordance with their assigned role (owner, manager, or staff).
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of PermitWise, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
We do not share your information with advertisers, data brokers, or any third party for their own marketing purposes.
4. Document Storage & Security
Documents you upload to PermitWise (permits, insurance certificates, inspection reports, etc.) are:
- Encrypted in transit using TLS 1.2 or higher
- Stored securely in cloud infrastructure with access controls
- Accessible only by you and authorized team members on your account
- Deletable by you at any time through the Service
We implement industry-standard security measures including password hashing (bcrypt), authenticated API endpoints, role-based access control, and secure session management. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
5. Data Retention
- Active Accounts: We retain your data for as long as your account remains active and as needed to provide the Service.
- Closed Accounts: Upon account deletion, we permanently remove your personal data, business data, permits, documents, and associated records from our active systems. Some data may persist in encrypted backups for up to 30 days before being permanently purged.
- Legal Holds: We may retain certain information as required by applicable law, regulation, or legal proceedings.
- Anonymized Data: We may retain anonymized, aggregated data that cannot identify you for analytics and service improvement purposes.
6. Your Rights & Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request permanent deletion of your account and data (see Section 7 below)
- Portability: Request an export of your data in a commonly used format
- Opt-Out of Communications: Unsubscribe from marketing emails at any time using the link in each email; disable SMS notifications in your account settings
- Withdraw Consent: Where processing is based on consent, you may withdraw it at any time
- Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at privacy@permitwise.app or use the in-app tools described in Section 7.
7. Account Deletion
You have the right to permanently delete your account and all associated data at any time. Upon deletion:
- All personal information, business data, permits, documents, inspections, events, and compliance records are permanently removed
- Any active subscription is automatically cancelled (no further charges will be incurred)
- Team members on your account will lose access
- This action is irreversible — data cannot be recovered after deletion
How to delete your account:
- On the Web App: Go to Settings → Billing, scroll to the "Danger Zone" section, and click "Delete Account Permanently". You will be asked to confirm twice.
- On the Mobile App (iOS/Android): Go to Settings → Legal & Support, scroll to the bottom, and tap "Delete Account Permanently". You will be asked to confirm twice.
- Via Email: Send a deletion request to privacy@permitwise.app from the email address associated with your account. We will process your request within 30 days.
8. Communications & Notifications
- Transactional Emails: Account verification, password resets, permit expiration reminders, renewal alerts, and event notifications. These are essential to the Service and cannot be fully opted out of while your account is active.
- SMS Notifications: Optional and available on eligible subscription plans. You can enable or disable SMS in your notification preferences at any time.
- Push Notifications: Optional and controlled via your device settings and in-app preferences.
- Marketing Communications: We may occasionally send product updates or feature announcements. You can opt out at any time via the unsubscribe link or your notification preferences.
9. Cookies & Tracking Technologies
Our web application uses the following types of cookies:
| Type | Purpose | Duration |
|---|
| Essential / Session | Authentication, security, and core functionality | Session / 30 days |
| Preference | Remembering your settings (dark mode, notification preferences) | 1 year |
| Analytics | Understanding usage patterns to improve the Service | Up to 2 years |
We do not use advertising or retargeting cookies. You can manage cookies through your browser settings, though disabling essential cookies may prevent the Service from functioning properly.
10. Third-Party Services
PermitWise integrates with the following third-party services:
Each of these services has its own privacy policy governing their handling of data. We encourage you to review them.
11. International Data Transfers
PermitWise is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfers. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.
12. Children's Privacy
PermitWise is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected data from a person under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at privacy@permitwise.app.
13. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know what personal information we collect, use, and disclose
- Right to request deletion of your personal information
- Right to opt out of the sale or sharing of personal information — we do not sell or share your personal information
- Right to non-discrimination for exercising your privacy rights
- Right to correct inaccurate personal information
- Right to limit use of sensitive personal information
To exercise these rights, email privacy@permitwise.app or use the in-app deletion tools (see Section 7). We will respond within 45 days as required by law.
14. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) including the rights to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal bases for processing are described in Section 2. To exercise your rights, contact privacy@permitwise.app.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via email or an in-app notification
- Where required by law, seek your consent for material changes
Your continued use of PermitWise after any changes constitutes acceptance of the updated Privacy Policy.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: