Privacy Policy

FlashPermit Inc. is a Delaware C-Corporation providing commercial HVAC and mechanical permit expediting services for Houston, Texas. We are the data controller responsible for personal information collected through the Platform.

We use the information we collect for the following purposes:

• •To provide, manage, and deliver the Services, including permit preparation, COMcheck coordination, and iPermits submission;
• •To process payments and send receipts;
• •To communicate with you about your Jobs, including status updates, document requests, and notifications;
• •To send transactional emails via Resend (job confirmation, payment confirmation, status updates);
• •To send marketing communications about FlashPermit services, where you have not opted out;
• •To improve and develop the Platform, including testing new features;
• •To detect, investigate, and prevent fraud, security incidents, and misuse of the Platform;
• •To comply with our legal obligations and enforce our Terms of Service;
• •To respond to your enquiries and support requests.

We retain your personal information for as long as your account is active or as needed to provide the Services. Specifically:

• •Account information is retained for the duration of your account and for 3 years after account closure, to support any post-service queries or disputes;
• •Job records, including documents, COMcheck files, and permit submissions, are retained for 7 years to support audit, legal, and compliance requirements;
• •Payment records are retained as required by applicable accounting and tax laws;
• •Code Checker session data is retained for 90 days before deletion.

You may request deletion of your account and associated data at any time (see Section 7). Certain data may be retained beyond your deletion request where required by law or for legitimate business purposes such as fraud prevention.

We implement industry-standard technical and organisational measures to protect your personal information, including:

• •Encryption of data in transit using TLS/SSL;
• •Row-level security (RLS) in our Supabase database to ensure users can only access their own data;
• •Authentication controls including magic-link email authentication;
• •Access controls limiting staff access to personal data to those with a legitimate need.

No method of data transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. If you become aware of any security vulnerability or breach, please contact us immediately at hello@flashpermit.com.

You have the following rights in relation to your personal information:

To exercise any of these rights, please contact us at hello@flashpermit.com. We will respond to your request within 30 days.

We may send you email communications about FlashPermit services, new features, and relevant updates. You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email, or by emailing hello@flashpermit.com with the subject line “Unsubscribe.” You will continue to receive transactional emails related to active Jobs regardless of your marketing preferences.

The Platform uses cookies and similar tracking technologies to:

• •Maintain your authentication session;
• •Remember your preferences;
• •Measure website traffic and usage (via Google Analytics / Google Ads Tag);
• •Track advertising conversion events.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

The Platform is intended for use by licensed commercial contractors and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 13, we will delete it promptly.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your California rights, please contact us at hello@flashpermit.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email and update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us: