Legal

Privacy Policy

Last updated 13 September 2026

Permit Signal is operated by Štefan Toporcer, Slovakia, who is the data controller for the personal data described here. Contact: steve@getpermitsignal.com.

1. What we collect and why

• Sample and subscription requests. Work e-mail, company, county and state, what your firm does and anything you add in the form. Used to send the sample and to run your subscription (contract performance, GDPR art. 6(1)(b)). Kept for the duration of the relationship and up to 3 years after the last contact, unless you ask us to delete it sooner.
• Billing. Payments are handled by our payment processor, which collects card details directly; we never see your full card number. We receive your name, e-mail, billing country and payment status to manage the subscription and to meet tax and accounting obligations (legal obligation, art. 6(1)(c)); accounting records are kept as long as the law requires.
• E-mail. Briefs are sent to the address you give us. Sending and reply logs are kept for deliverability and support (legitimate interest, art. 6(1)(f)).
• Website. The site is static and uses no analytics, advertising or tracking cookies. Our hosting provider records standard server logs (IP address, time, page requested) for security, which it retains for a limited period.

2. Facility data in the briefs

Briefs contain information about permitted facilities and, where an agency publishes it, the name of a permit holder or agency contact. This comes solely from public government records (EPA ECHO, TCEQ open data). We do not enrich it with private data and we do not build profiles of individuals.

3. Who processes data for us

Zoho (EU data centre) for e-mail and forms; Resend for automated brief delivery; Supabase (EU) for the records database; GitHub Pages for website hosting; our payment processor for billing. Some of these providers are in the United States; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

4. Your rights

You can ask for access to, correction or deletion of your data, restriction of processing, portability, or object to processing based on legitimate interest, by e-mailing the address above. You can also complain to the Slovak data protection authority (Úrad na ochranu osobných údajov SR) or your local authority.

5. Changes

If this policy changes materially, subscribers are told by e-mail. The date at the top shows the current version.