Legal
Privacy Policy
1. Information We Collect
Account data: the email address, optional name, and hashed password you provide at sign-up, plus billing details processed by our payment provider (we never store full card numbers). Usage data: the lookups, searches, and exports you perform, retained to enforce plan limits and produce your usage history. Permit data served through the platform is collected from public municipal sources and is not personal information about you.
2. How We Use Information
To operate your account, authenticate you, enforce plan and rate limits, process payments, provide support, and improve the Service. We do not sell your account or usage data.
Product analytics: we record first-party product-analytics events for logged-in accounts — actions like searches, filters, map use, exports, and upgrade prompts — to understand how the Service is used and to improve it. This data stays in our own systems (no third-party analytics processor receives it), excludes IP address, user agent, and raw search text, and is retained for 24 months. We also link the first marketing page and referrer that brought a new signup to their account, without sending any additional information to Google.
3. Cookies and Sessions
We use a first-party session cookie (httpOnly, SameSite=Lax) to keep you signed in. We also use Google Analytics, which sets cookies to measure site usage (pages viewed, traffic sources, aggregate behavior); this data is not used for advertising. We do not use third-party advertising cookies.
4. Data Security
Passwords are hashed with argon2id and never stored in plaintext. Two-factor secrets are encrypted at rest. Access to production data is least-privilege and audited. We are pursuing SOC 2 controls across authentication, logging, and data handling.
5. Data Sharing
We share data only with the processors required to run the Service (payment processing, infrastructure hosting, error monitoring, and Google for site analytics), each bound by confidentiality and data-protection terms. We disclose data to authorities only when legally required.
6. Your Rights
You may access, correct, export, or delete your account data. To exercise these rights, email info@buildersmonitor.com. We respond within 30 days.
7. Retention
Account and usage data are retained for the life of your account and for a limited period afterward to meet legal, tax, and audit obligations. Current-month usage events drive your live balance; historical events are retained for billing accuracy.
8. Contact
Questions about this policy: info@buildersmonitor.com.