Privacy Policy

PermitBeam is operated by Alex Colombo. This policy describes the information PermitBeam handles on the public website, in access requests, in the Building Brief, and in the private review desk.

Information We Collect

• Access requests: the email address and optional name you send us, and anything you include in your reply, such as a building address.
• Account use: your email address, authentication records, the building addresses you brief, and a dated snapshot of which public records existed for each building (so the next brief can show what changed), plus desk settings, saved records, watches, notes, and report preferences.
• Technical information: ordinary hosting and security logs such as IP address, browser type, request time, and error details.
• Advertising measurement: the public marketing page uses Meta Pixel to measure ad performance. Meta may set or read cookies under its own policies.
• Payment information: if a separate paid arrangement uses Stripe, Stripe processes the card information. PermitBeam does not store full card numbers.

The desk also displays names, addresses, filings, and identifiers obtained from official public-record sources. That source material is separate from information collected about a PermitBeam visitor or account holder.

How We Use Information

We use information to answer access requests, provide and secure private-desk access, save the review work you ask the desk to retain, deliver requested service messages, troubleshoot problems, and improve the service. We do not sell personal information or share your email with third-party marketers.

The building addresses you brief stay confidential. We don't share or sell them, we use them only to run your briefs and show what changed, and we delete them on request.

Service Providers

PermitBeam uses Vercel for website hosting, Supabase for database and authentication services, Resend and Cloudflare for email delivery and routing, Meta for advertising measurement, and Stripe when a separate paid arrangement requires payment processing. These providers process information only as needed to supply their services and under their own privacy terms.

When you open a brief, your browser requests the building's records directly from public data services (NYC Open Data, NYC Planning's address search and tax-lot map, and New York State's open data portal) and loads map images from OpenFreeMap. Those services receive the address or map area requested, along with ordinary technical information such as your IP address.

Cookies and Local Storage

The private desk uses browser storage and authentication data to keep you signed in and remember review state. Meta Pixel may use cookies on the public marketing page. You can block or clear browser storage, although doing so may sign you out or remove local preferences.

Retention

We keep pilot-request and account information only as long as reasonably needed to provide the service, maintain security and operational records, comply with legal obligations, and resolve disputes. Saved desk work remains available while the related account is active unless you delete it sooner. Backups and security logs may persist for a limited period after deletion.

Your Choices

You may ask to access, correct, export, or delete personal information associated with your pilot request or account. You may also ask us to stop non-essential email. Some records may be retained when required for security, fraud prevention, legal compliance, or an active dispute.

Security

PermitBeam uses HTTPS, restricted private-desk access, and database access controls. No internet service can guarantee absolute security; if we discover a breach that legally requires notice, we will provide that notice as required.

Changes to This Policy

We may update this policy as the service evolves. The effective date below identifies the current version.

Contact

Questions about this policy or your data? Email hello@permitbeam.com.