Privacy Policy

FilePermits is a product of M0 Media LLC ("FilePermits", "we", "us"). We make a Chrome extension and online service that fills city building-permit applications for contractors. This policy explains what information we collect, how we use it, who processes it for us, and the choices you have. It covers the FilePermits Chrome extension, the FilePermits API and this website.

Information we collect and how we use it

Account email

You sign in with your email address and a one-time code we email to you. We use your email to sign you in, to connect you to your company account, to send team invitations when your account owner asks us to, and to contact you about your account and billing.

Company profile

Your company profile holds the business details you enter once, such as your company name and address, license and city registration numbers, insurance details, and qualifier and office contacts. We store it in our database and share it with the members of your company account, and the extension keeps a copy in your browser. We use it to fill permit applications for you.

Job details

When you paste a job or capture it from an open job page, the extension sends that text (and, for a captured job, the website's domain name) to our API. Our API passes the text to our AI provider, Anthropic, to read it into job fields such as the site address, homeowner, scope of work and equipment.

The resulting job record is stored only in your browser, in Chrome's storage for the extension on your computer. It is deleted automatically once it has gone 30 days without changes: the extension checks once a day, and when Chrome starts, even if you never open FilePermits. You can change this to 7 or 90 days in the extension's settings, delete a job yourself at any time, and uninstalling the extension removes all stored jobs.

The FilePermits servers do not store or log job text or job records. Our server logs contain only the request route, response status, timing, your company account ID and AI token counts.

Page structure and templates

To map a permit page FilePermits hasn't seen before, the extension sends a description of the page's form to our API and to Anthropic: the type of permit portal, the page title and headings, and for each field its label, field type, nearby text and the choices in any dropdown list. It never sends the values typed into the fields.

The resulting mapping is saved as a "template" for your company account so the page can be filled right away next time. A template stores the portal's web address and page name, a list of the page's field labels used to recognize it, and for each mapped field: its label (in lower case), field type, the element id, name and position the page gives it, which job or profile detail it takes, and, for dropdowns and checkboxes, which of the portal's own options to choose. Templates contain the portal's form structure only, never the values you or FilePermits enter.

When two or more companies save the identical mapping for the same page, a copy may be shared as a public template that other FilePermits users can use. A public template contains the same form structure (field labels, locations and options as written by the portal), never values, and is not linked to any company.

Filling happens in your browser

When you click Fill page, the extension enters your job and company profile values into the page directly in your browser. Those values are not sent to our servers when filling. To avoid overwriting your entries, the extension checks whether a field is already filled, but it never records or sends what is in it.

Usage counts

The extension reports counts that help us run and improve the service: for example, how many fields were filled, failed or skipped on a page, how long filling took, the kind of portal and page involved, and when a page is mapped. Each is stored as an individual event with its date, linked to your company account and user account. We also count AI calls and tokens per company account per day to apply daily limits. Usage counts never include job details, homeowner information or field values.

Technical data

Like any online service, the providers that run FilePermits process your IP address and basic browser information when the extension or this website talks to them: Cloudflare (our API and website), Supabase (sign-in, which keeps a log of sign-ins with IP address and browser for security) and Stripe (checkout and billing). The FilePermits application logs themselves do not record IP addresses.

Billing

Payments are processed by Stripe. We store your Stripe customer and subscription IDs, your plan, your subscription status and the end of your current billing period. We never receive or store your card number.

This website

The filepermits.com website is a static site. It does not set cookies or run analytics or advertising scripts.

What we never collect or do

• We never store your portal passwords. You sign in to each city portal yourself.
• The extension never records or sends the contents of password, payment, CAPTCHA, file upload, signature or certification fields, and never fills them.
• We don't sell your information, and we don't use it for advertising.
• We don't use your information to determine creditworthiness or for lending.

Service providers (subprocessors)

We use these companies to run FilePermits. Each processes data only to provide its service to us.

• Supabase: database and sign-in. Stores account emails, company accounts and members, company profiles, templates, usage counts and billing status.
• Cloudflare: hosts our API. Requests from the extension, including job text and page structure, pass through it in transit.
• Anthropic: AI processing. Receives job text you paste or capture, and form labels and page structure when you map a new page.
• Stripe: payments. Handles checkout, card details, invoices and subscription management.
• Resend: email delivery. Sends sign-in codes and team invitations.

Retention and deletion

• Account, company profile and templates are kept while your account is active.
• Job details live only in your browser and are deleted according to your retention setting: 30 days without changes by default, or 7 or 90 days if you choose (checked daily).
• Usage events and daily AI counts are kept while your account is active and are deleted with your company's data.
• Billing records may be kept by us and by Stripe where the law requires it, for example for tax and accounting.

To delete your account or your company's data, email hello@filepermits.com from the email address on your account. We respond to deletion requests within 30 days. Public templates contain no company information and may be kept.

Security

Data sent between the extension and our servers is encrypted in transit using HTTPS. Database access rules limit each company's data to members of that company. No system is perfectly secure, but we work to protect your information and to keep what we store to a minimum.

Your choices

• You can view and edit your company profile at any time in the extension.
• You can delete jobs, or change how long they are kept, in the extension.
• You can ask for a copy of the information we hold about you, or ask us to correct or delete it, by emailing hello@filepermits.com.

FilePermits is a tool for businesses and is not intended for children.

Chrome Web Store Limited Use

The use of information received through the FilePermits Chrome extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes to this policy

We will post any changes on this page and update the effective date above. If a change materially affects how we handle your information, we will email account owners before it takes effect.

Contact

FilePermits is operated by M0 Media LLC. Questions about this policy or your data? Email hello@filepermits.com.