Privacy & Data Retention Notice

Information we collect

• Account information: identifiers made available by the sign-in platform, such as account ID, name, and email address.
• Project and intake information: property addresses, parcel details, proposed uses, answers, notes, and other project facts you submit.
• Documents and reports: files you upload and reports, findings, or supporting material created for the project.
• Order information: product, amount, payment status, Stripe transaction identifiers, and related order records. Stripe processes card details; we do not receive or store your full card number.
• Technical and support information: security and diagnostic logs, browser or request data made available by the hosting platform, and communications with support.

How we use information

We use information to authenticate users, create and maintain projects, perform research, prepare and deliver reports, process and reconcile orders, provide support, prevent fraud and abuse, maintain security, troubleshoot the service, meet legal and accounting obligations, and improve PermitOS.

Service providers and disclosures

We disclose information as needed to vendors that operate the service, including OpenAI and its hosting infrastructure for the PermitOS site, Stripe for payment processing, and providers used for storage, communications, security, or professional support. These providers process information for their contracted services. We may also disclose information when required by law, to protect rights or safety, in connection with a business transaction, or with your direction.

We do not sell personal information or share it for cross-context behavioral advertising.

Retention

We keep information only as long as reasonably needed for the purposes described above, subject to legal holds and applicable requirements. Our general retention periods are:

• Project, intake, and report records: while the account or project is active and generally up to 3 years after the last project activity or order.
• Uploaded documents: generally up to 3 years after the last activity for the related project, or earlier after a verified deletion request when no continuing need or legal obligation applies.
• Order and accounting records: generally 7 years to support tax, accounting, fraud prevention, and dispute obligations.
• Security and diagnostic logs: generally up to 12 months, unless needed longer to investigate an incident or comply with law.
• Support communications: generally up to 3 years after the matter closes.

Deletion from active systems may not immediately remove information from routine backups. Backup copies are isolated, expire through normal cycles, and are not used for ordinary business purposes.

Your choices and requests

You may ask to access, correct, or delete personal information, or appeal our response, by emailing support@ryzetx.com. Describe the request and the account or order involved. We may verify your identity and may retain information when required for legal, security, accounting, dispute, or other permitted purposes. Depending on where you live, applicable law may provide additional rights.

Security

We use reasonable administrative and technical measures designed to protect information, including access controls and payment processing through Stripe. No internet transmission or storage system can be guaranteed completely secure. Please do not upload Social Security numbers, full payment card numbers, bank credentials, or unrelated sensitive information.

Children and location

PermitOS is intended for adults and is not directed to children under 18. We operate in the United States, and information may be processed and stored in the United States.

Changes and contact

We may update this notice to reflect changes in the service or law. We will post the revised notice with a new effective date. Questions and privacy requests may be sent to Ryze Property Solutions LLC at support@ryzetx.com.