Rolling Permits

Privacy Policy

1. Overview

This Privacy Policy explains what information Rolling Permits ("we," "us," "our") collects, how we use it, and what choices you have. By using the Service, you agree to the practices described here.

2. Information We Collect

Account & business information (provided directly by you):

• Business name, owner name
• Email address
• Phone number (used for SMS reminders, paid plans only)
• Password (stored in hashed form by our authentication provider, never in plain text)

Permit & operational data (provided directly by you):

• Truck names
• Permit types, permit numbers, issuing jurisdictions, issue and expiration dates
• Uploaded permit documents (PDFs or photos)

Payment information:

Processed and stored by our payment processor (Stripe), not stored directly on our servers. We retain only the subscription status and limited billing metadata needed to manage your account.

Automatically collected information:

Basic usage data (e.g., login timestamps) as part of normal application operation.

We do not currently use third-party advertising trackers or sell any data to data brokers or advertisers.

3. How We Use Your Information

We use the information collected to:

• Operate your account and display your permits and trucks
• Send permit renewal reminders via email and/or SMS
• Process payments and manage your subscription
• Respond to support requests
• Maintain and improve the Service, and detect/prevent abuse

4. Where Your Data Is Stored

• Database and file storage: Supabase (hosted on Amazon Web Services infrastructure). Your data is protected by row-level security policies that restrict access to your own account's data only.
• Uploaded permit documents: stored in a private storage bucket, accessible only via time-limited signed links generated for your account.
• Email delivery: Resend
• SMS delivery: Twilio
• Payments: Stripe
• Document auto-fill (paid plans): uploaded permit photos may be processed by Anthropic's Claude API solely to extract permit details (type, dates, numbers) for your review before saving.

Each of these providers processes a limited slice of your data solely to perform the specific function described, and is bound by its own privacy and security practices.

5. SMS & Email Communications

If you provide a phone number, you may receive SMS reminders related to your permits (paid plans only). Message and data rates may apply. You can opt out of SMS at any time via account settings or by replying STOP. You can manage email notification preferences from your account settings; note that some emails (e.g., billing notices) may be necessary account communications you cannot opt out of while your account remains active.

6. Data Retention

We retain your account and permit data for as long as your account is active. If you cancel your account, we retain data for 90 days after cancellation to allow for account recovery, after which it may be deleted. You may request earlier deletion by contacting us (see Section 9).

7. Your Rights

All users may request to access, correct, or delete their personal information by contacting us directly, or by using in-app account controls where available.

California residents (CCPA/CPRA): You have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information with third parties for advertising purposes
• Non-discrimination for exercising these rights

To exercise these rights, contact us at support@rollingpermits.com.

8. Children's Privacy

The Service is not directed at, and not intended for use by, anyone under 18. We do not knowingly collect information from minors.

9. Contact

Questions about this Privacy Policy, or requests to access/delete your data, can be sent to support@rollingpermits.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice before they take effect.