Privacy policy

1. Who we are

The Service is operated by NameVerse, INC. ("we", "us"). Contact: [email protected].

ePermit is a business tool for contractors and permit service companies. It is not a government agency and does not issue permits.

A company that uses ePermit decides what information about its customers and projects it enters. For that information we act on the company's behalf, and the company is responsible for its own use of it.

2. What we collect

• Account information: name, e-mail address, phone number, preferred language, role and company; the company's name, address, license details and signature image if they are added; your password (stored only as a one-way hash) and your two-step sign-in secret (encrypted).
• Project and customer information a company enters: site addresses and parcel details; the homeowner's name, e-mail address, phone number and address; equipment, measurements, notes, photos, documents, inspections, and the packages generated from them.
• Usage and security information: sign-in times, IP address, browser or device type, app version, and the actions taken in the Service (an audit log the company can review). We use this to secure the Service and to support you.
• Billing information: plan, invoices, payment status and the customer and subscription identifiers our payment processor assigns. Card numbers are entered on Stripe's pages and never reach our servers.
• Cookies and browser storage: cookies that keep you signed in, and your language choice. We use no advertising cookies.

3. The ePermit app for iPhone and iPad

The app uses the information below only for the feature named, and only when you use that feature. iOS asks for each permission the first time a feature needs it, and you can change your answer in the Settings app at any time.

• Precise location (field technicians): only while you use the app ("While Using the App"), and only when you check in to or check out of a visit. The position and time are saved with the visit and shown to your company's office (and, for a visit made for a permit service company, to that company). We do not track your location at any other time, and never in the background. While you are checked in, the app asks iOS to remind you if you leave the site without checking out; iOS watches that area on your phone and nothing is sent to us until you check out. Check-in and check-out positions are kept with the visit for as long as the company keeps the project.
• Location in photos: when you allow location, the app writes the position and time into the site photos you take, so the office can match them to the site. That information is removed before a photo is sent to our AI provider (section 6).
• Camera, photos and document scans: the photos and scans you take or choose are uploaded to the project they belong to. When you scan an equipment label, the text is read on your phone by Apple's on-device text recognition; nothing leaves the phone unless you save the result to the project.
• Signatures: a customer's sign-off drawn in the app (for example at the end of a visit) and a homeowner's signature on a request are saved as images in the project.
• Notifications: if you allow them, the app registers your device's push token with the app version and language, so we can send the notifications you choose. The token is no longer used once you sign out, and it is removed when you delete your account.
• Face ID and Touch ID: handled entirely by iOS. ePermit never receives face or fingerprint data; the app only learns whether the unlock succeeded.
• Calendar and photo library: the app only adds an inspection to your calendar, or saves an image to your library, when you tap the button that does it. It never reads them.
• The app contains no advertising and no third-party analytics, and it does not track you across other companies' apps or websites.

4. Homeowners

If your contractor or permit service company uses ePermit, the information about you and your project comes from that company: your name and contact details, the site address and the permit's records.

• Signing in: you sign in to the app with a six-digit code e-mailed to the address the company has for you, or with the owner link the company sends you. For each sign-in we keep your e-mail address, IP address, the device name you give and your device's browser or app identifier, until the sign-in ends.
• What you see: the permit's status, its inspections and what to prepare, the documents the company shares with you, and the company's requests (a photo, a document, a signature or a question). Your answers and uploads go to that company. You never pay anything in ePermit.
• Safety: a company can only ask you for photos you can take from the ground. You are never asked to open an electrical panel or to go onto a roof or into an attic.
• Deleting your data: in the app, open Settings and tap Delete my data, or write to us at [email protected]. Your sign-ins and codes are deleted at once and the owner links you had stop working. We tell each company that holds your record; that company keeps the permit file the city requires and decides about the rest under its own records policy.

5. How we use information

To provide and operate the Service; to generate packages, calculations and jurisdiction research; to send the notifications, e-mails and text messages you and your company choose; to provide support; to bill; and to keep the Service reliable and secure and prevent abuse. The only analytics is the website's cookie-free page counter (section 7).

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it to advertise to you.

6. AI features

Some features use AI models from Anthropic: jurisdiction research and generated text use the project details and the request; a panel read sends a project's electrical panel photos, with their location information removed, only when someone asks for a panel read. Anthropic processes this data under commercial terms that do not allow it to train its models on it. Results are stored in the company's account with their sources and are reviewed by a person before they are used.

In the app, a panel read first asks for your consent (Send photos or Cancel), and nothing is sent unless you choose Send photos. You can withdraw that consent at any time in the app under Settings → Security → AI features, by turning off Send panel photos to the AI provider; the next panel read asks again.

7. Service providers

These providers process information on our behalf, each only what its function needs:

• Anthropic — AI models (section 6).
• Stripe — payments: plans, plan sets and research credits on the web, and the fee of a permit service, from the web or the app's "Pay service fee". Payment details are entered on Stripe's pages.
• E-mail and text-message delivery services — sign-in codes and links, invitations, requests and notices.
• Apple Push Notification service — notifications to the app.
• Hosting and storage providers — servers, database and file storage, with files encrypted at rest.
• Google Maps Platform, including the Solar API — address search, maps, and roof and solar data for a site.
• Public geocoding and parcel data (for example the U.S. Census geocoder and county parcel records) — locating a site.
• Website analytics — a cookie-free page counter that NameVerse runs itself at pl.nameverse.net, on the epermit.net website only (not in the app). It records the page path (never the query string or a link's token), the referring website, browser and device type, screen size, language, and the country derived from the IP address. It sets no cookies and does not store the IP address.

Each provider, and any NameVerse, INC. affiliate that handles the data, is bound by contract to protect personal information at least as well as this policy does and to use it only to provide its service to us.

We also disclose information when the law requires it, to protect the Service or its users, or as part of a merger or sale of the business, in which case this policy continues to apply.

8. Company data isolation

Each company's projects, customers, files and catalog additions are kept apart from every other company's. A permit service company sees a client's projects only while the client grants it access. Our administrators see account, plan and usage totals to operate the Service and look at project content only to provide support you ask for.

9. Retention

• Account and project information: while the company's account is active.
• Sign-ins (with their IP address and device type): until you sign out or the sign-in expires (at most 30 days after its last use), then deleted within a week. Homeowner sign-in codes are deleted within a day.
• After a company closes: its data can be exported for 30 days and is then deleted from live systems; backups are replaced within 90 days.
• Audit logs, invoices and records the law requires us to keep: for as long as required.

10. Deleting your account

• In the app (office users): Settings → Security → Delete account, confirmed with your password and two-step code, or Face ID or Touch ID. Deleted at once: your name, e-mail address, phone number, password, two-step sign-in, sign-ins, push tokens and pending links. You are signed out everywhere and taken off your open field visits.
• In the app (field technicians who sign in by link): Settings → Security → Delete account, confirmed in one alert. Deleted at once: your name, e-mail address, phone number, sign-ins, push tokens and pending links. You are signed out everywhere and taken off your open field visits.
• What your company keeps: the permits, photos, notes and visits you worked on (including check-in and check-out times and positions) and the audit log of actions belong to your company and are part of the permit file a city may ask for. They stay, shown as "Deleted user". The anonymous record that links them is kept for as long as the company keeps those records.
• The only admin of a company: the app offers Delete account and close company. Your account is deleted as above, the company's web subscription is set to end at the end of the period already paid, and the company's data stays available to its other users for 30 days to export before it is deleted.
• Homeowners: see section 4.
• By e-mail: write to [email protected] from the address on the account. We confirm the request and complete it within 30 days.

11. Security

Information is encrypted in transit; sensitive fields and files are encrypted at rest; office accounts sign in with two-step verification; and sign-ins and administrative actions are logged. No system is perfectly secure, so please use a strong, unique password and keep your authenticator safe.

12. Your choices and rights

You can view and update your account information in the app or on the web, export your company's projects and packages, and delete your account as described in section 10. California residents have the right to know what personal information we collect, to ask for its deletion or correction, and not to be treated differently for using these rights. To use any right, write to [email protected]; we will verify the request through your account.

13. Children

The Service is for businesses and their customers and is not directed at children under 13; office and field accounts are for people 18 or older.

14. Changes to this policy

We will post updates on this page with a new date, and tell company administrators about material changes by e-mail or in the Service.

15. Contact

NameVerse, INC. · ePermit · [email protected]