Privacy Policy

Omaha Building Permit Portal LLC ("we", "us") respects your privacy. This Privacy Policy explains what information we collect, how we use it, the third parties we share it with, and your rights.

1. Information We Collect

• Contact information: name, email address, phone number, mailing address.
• Property information: project address, owner name, property details.
• Project information: scope of work, valuations, drawings, contractor info and any documents you upload.
• Payment information: handled directly by our payment processor (we do not store full card numbers).
• Account information: email and password hash if you create an account.
• Technical information: IP address, browser type, and basic analytics about how you use the site.

2. How We Use Your Information

• Prepare and file your permit application with the City of Omaha.
• Communicate with you about your application (status updates, receipts, follow-up questions).
• Process payments and produce invoices/receipts.
• Comply with legal, tax and recordkeeping requirements.
• Improve the website and prevent fraud or abuse.

We do NOT sell your personal information. We do NOT use it for advertising to unrelated third parties.

3. Third Parties Who Process Data on Our Behalf

We use the following service providers ("sub-processors") to operate the service:

• Supabase (database, authentication, file storage) — stores your application data and account credentials.
• Stripe (payments) — processes credit/debit-card payments. Stripe's privacy policy applies to your payment information.
• Resend (transactional email) — delivers receipts and status updates to your inbox.
• City of Omaha / Accela — we submit your application data to the City through the Accela portal. Once submitted, the City's own privacy policies and public-records rules apply.

4. Data Retention

We retain application records and payment records for at least seven (7) years for accounting, tax and recordkeeping purposes. Account login records are kept until you ask for deletion.

5. Your Privacy Rights

Depending on where you live (including under the GDPR and California CCPA), you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information (subject to recordkeeping obligations).
• Withdraw consent or object to certain processing.
• Receive a copy of your data in a portable format.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email xylomediaaa@gmail.com from the email address on file. We respond within 30 days.

6. Security

We use industry-standard security practices: HTTPS in transit, encrypted storage at rest, row-level access controls in our database, and limited administrative access. No system is 100% secure, but we treat your data seriously.

7. Children

Our service is not intended for individuals under 18. We do not knowingly collect information from children.

8. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version.

9. Contact

Questions or data requests: xylomediaaa@gmail.com.