Privacy policy

Who we are

PermitLeads runs this website and the daily permit-lead email. Contact: hello@workpermitleads.com.

What we collect

Only what you type into our forms.

• After you subscribe (the welcome form): your email address, your trade, the boroughs and ZIP codes you choose, and the smallest job size you want to see.
• When you pay: payment happens on Stripe’s own checkout page. Stripe collects your card and billing details there. We never see or store your card. Stripe sends us the email address you used at checkout, so we can reach you about your subscription.
• Free sample form: your email address, your trade and the ZIP codes you enter.
• Unsubscribe form: lookup-only. The email address you type is used only to find your subscription and isn’t stored.

Our app doesn’t set cookies or use analytics or tracking pixels. Our hosting provider’s servers add one technical cookie (named GAESA) to responses. Our app writes short operational log lines, which can include a recipient’s email address and Stripe event IDs or billing notes, and our hosting provider, Replit, may keep its own server logs.

How we use it

• If you ask for a free sample, we use your email address, trade and ZIP codes to send you one list, once.
• If you’ve paid but haven’t picked your trade yet, we send you one email with a link to the welcome form.
• To build and send your morning email: we match new permits to your trade, areas and job size, and keep a record of which permits we already sent you so you don’t get repeats.
• Each email carries an unsubscribe link with a random code that identifies your subscription, so one click can stop your emails.
• We keep a copy of every email we build (recipient, subject and content) so we can check what went out.

We don’t use your information for anything else, and we don’t sell it.

The free sample list

• The free sample is one email. We don’t send that address any other email (no reminders and no follow-ups) unless you subscribe.
• We keep your email address and the date of your sample so that each address gets only one free sample. We also keep your trade and ZIP codes, and a copy of the email we sent, like any other email we send.
• The free sample doesn’t involve Stripe: no card, no payment details, and nothing is sent to Stripe. If you later choose to subscribe, checkout happens on Stripe’s page as described above.
• To stop abuse, the form counts requests from each IP address in our server’s memory for a short time. We don’t write IP addresses to our database or our logs.

Where it’s stored

Information is kept in a PostgreSQL database hosted by Neon. Our app is hosted on Replit.

Who we share it with, and how

Only the services that run the product:

• Stripe (payments): you enter payment details on Stripe’s hosted checkout page. To cancel billing, email hello@workpermitleads.com.
• Resend (email delivery): when we send you an email, our server passes your email address and the email’s content to Resend’s API, which delivers it.
• Replit (hosting): our app runs on Replit’s servers.
• Neon (database): our PostgreSQL database is hosted by Neon.

We don’t share your information with anyone else.

How we protect it

• The site is served over HTTPS.
• The private settings this site uses today (the admin password, the scheduler token and the payment link) are stored in our hosting provider’s secrets settings, not in our code.
• Card details never reach our server: payment happens on Stripe’s page.
• Our admin pages need a password.

Your choices

• Use the unsubscribe link in any email, or the unsubscribe page, to stop emails.
• To see, correct or delete what we hold about you, write to hello@workpermitleads.com.

Changes

If this policy changes, we’ll update this page and the date at the top.