Privacy Policy

Permiterra is a professional drafting service for clients in the United States, operated via permiterra.com. For questions about this Privacy Policy or your personal data, contact us at orders@permiterra.com.

We collect only what is necessary to process your order, deliver your drawings, and communicate with you.

Information you provide directly:

• Full name and email address — provided at checkout
• Property address — provided at checkout or via order form
• Payment information — collected and processed by Stripe; we never see or store your card details
• Any additional property details you provide to help us complete your drawing

Information collected automatically:

• IP address — recorded at checkout at the moment you agree to our Terms of Service
• Timestamp of order placement and Terms agreement
• Download activity — when your secure download link was accessed and how many times
• Basic browser and device information collected via Cloudflare for security and performance purposes

Information we do not collect:

• We do not collect credit card numbers, CVV codes, or bank account details — all payment data is handled exclusively by Stripe
• We do not use tracking pixels, third-party advertising cookies, or behavioral profiling tools
• We do not collect information from social media platforms

We use your information solely for the following purposes:

• To process and fulfil your order
• To deliver your completed drawings via secure download link
• To communicate with you about your order — confirmations, delivery, revisions, and support
• To send a review request 48 hours after delivery (you may opt out at any time)
• To send a follow-up service offer 14 days after delivery if you have not placed a subsequent order (you may opt out at any time)
• To record proof of delivery and Terms agreement for chargeback protection purposes
• To comply with legal obligations

We do not use your information for any purpose beyond what is listed above without your explicit consent.

Your order data is stored securely in Supabase, a cloud database with row-level security enabled. Your completed drawings are stored in Cloudflare R2 private cloud storage — files are never publicly accessible and are only served via short-lived signed URLs generated at the time of download.

We retain your order information for a minimum of 3 years for accounting and dispute resolution purposes. After that period, personal data is deleted or anonymised unless we are required by law to retain it longer.

All data is transmitted over encrypted HTTPS connections. Payment data is processed exclusively by Stripe and is never transmitted to or stored on our servers.

We share your information only with the third-party service providers necessary to operate our business. Each provider is bound by their own privacy policies and data processing agreements:

• Stripe — payment processing and US sales tax collection via Stripe Tax. Stripe processes your payment information independently and calculates, collects, and remits applicable US state sales tax on your purchase. Stripe Privacy Policy
• Supabase — secure database hosting for order records
• Cloudflare — CDN, security, DNS, and R2 file storage
• Resend — transactional email delivery (order confirmations, delivery emails)
• Vercel — website hosting

We do not share your information with any other third parties. We do not use Google Analytics, Facebook Pixel, or any advertising or behavioural tracking tools.

We use only essential cookies necessary for the Site to function — session management, security (hCaptcha), and Cloudflare performance cookies. We do not use advertising cookies, tracking cookies, or any cookies that follow you across other websites.

You can disable cookies in your browser settings. Disabling essential cookies may affect your ability to complete an order on the Site.

You have the following rights regarding your personal data:

• Access — you may request a copy of the personal data we hold about you
• Correction — you may request that we correct inaccurate information
• Deletion — you may request that we delete your personal data, subject to our legal retention obligations
• Portability — you may request your data in a commonly used, machine-readable format
• Opt-out of marketing emails — every email we send includes an unsubscribe link. You may also opt out by emailing orders@permiterra.com

To exercise any of these rights, contact us at orders@permiterra.com. We will respond within 30 days.

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have inadvertently collected such information, contact us immediately at orders@permiterra.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. For significant changes, we will notify active clients by email. Continued use of the Site following any update constitutes acceptance of the revised policy.

For any questions, requests, or concerns regarding this Privacy Policy or your personal data:

• Email: orders@permiterra.com
• Website: permiterra.com

We aim to respond to all privacy-related enquiries within 5 business days.