What this website collects, which is almost nothing.

1Who this is and what it covers

This notice is issued by PermitX and covers www.permitx.io, the public website. It describes what the website receives, who else sees it, and how long it is kept.

We can be reached at contactus@permitx.io or 905 965 0323. Our postal address is 231 Millway Ave, Vaughan ON, Canada.

2What this notice does not cover

PermitX the product is delivered through Quoto Build, which is a separate application behind a login. If you upload a drawing set, that set is handled there and not here, under the agreement you accept when you create an account. Nothing on this page describes what happens to an uploaded drawing, how long it is retained, or where it is stored.

That omission is deliberate rather than an oversight. Those are the questions that matter most to a firm or a municipality, and they deserve an answer from the service that actually holds the file, not a paraphrase on a marketing site. Read the terms at Quoto Build, or write to us and ask directly. A procurement or security questionnaire is answered by a person, not by this page.

3What the website stores on your device

Nothing. Specifically, and this is checkable:

• No cookies are set, by us or by anybody else.
• No analytics or measurement product is loaded. There is no Google Analytics, no tag manager, and no product analytics of any kind.
• Nothing is written to local storage or session storage.
• There are no tracking pixels, no advertising tags, and no social embeds.
• There is no consent banner, because there is nothing to consent to.

This is a static website. Every page is a file that was built once and is served as it is, and it has no database and no user accounts. You are welcome to verify all of the above with your browser's developer tools; that is a faster and more trustworthy check than reading this paragraph.

4What we receive when you send us something

There are two forms on this site, and neither one does anything until you press its button.

4.1 The contact form

These are its fields, and they are the whole list:

Name

Required. So a reply is addressed to a person.

Email address

Required. It is where the reply goes, and it is set as the Reply-To on the notification we receive.

Company or studio

Optional.

Municipality

Optional. It tells us whether the zoning layer is loaded where you are filing.

Role

Optional. Chosen from a list.

Reason for writing

Chosen from a list. It becomes the subject line so enquiries can be triaged.

Message

Optional, and free text. Whatever you choose to put in it is what we receive.

We use it to answer you, and to keep a record of the conversation. We do not use it to build a profile, we do not enrich it against other data sources, and we do not sell or rent it to anybody.

4.2 The newsletter box

One field, your email address, used to send you occasional updates about PermitX. Every email we send carries an unsubscribe, and you can also just reply and ask.

5The third parties in the picture

Three, and this is all of them. Two of them see a request simply because you loaded this page; the third sees nothing unless you submit a form.

Render

Hosting. Serves the pages you are reading. Its edge keeps standard server logs, which include IP addresses, for operational and security purposes. Every page view.

Google Fonts

Typefaces. Serves the three typefaces this site is set in. A font request carries your IP address and browser user agent to Google. Every page view.

Web3Forms

Form delivery. Receives what you type into the contact form or the newsletter box, stores the submission and emails it to us. It sees nothing if you do not submit a form. Only when you submit a form.

Google Fonts is the one worth calling out, because it is the only third party that sees a request from a visitor who never interacts with the site at all. Loading a typeface from Google sends your IP address and user agent to Google. We consider that a fair trade for typography that renders identically everywhere, and if you would rather it did not happen, a content blocker stops it and the site still reads correctly in a fallback face.

6Legal basis, and why we hold it

Under Canadian federal private sector privacy law, and under Ontario's own rules where they apply, we rely on your consent: you filled in a form and pressed send, for the purpose printed next to the button. We hold what you sent in order to reply to you and to keep a record of having done so.

We do not use your information for automated decision making, and nothing you send through this website is used to train a model.

7How long we keep it

An enquiry is kept for as long as it takes to answer, and then for as long as we would reasonably expect to need the record of the conversation, which is typically the life of the commercial relationship, or two years from the last contact if there is not one.

A newsletter subscription is kept until you unsubscribe. Server logs at our host are kept on their operational schedule, which is short and is not something we control.

If you would like something deleted sooner, ask. That is not a special procedure; it is one email.

8Your rights, and how to use them

You can ask us to:

• tell you what we hold about you;
• give you a copy of it;
• correct it if it is wrong;
• delete it;
• stop sending you email.

Write to contactus@permitx.io and quote PX-PRIV-001. We answer within thirty days and normally much sooner. If we get it wrong, you can complain to the Office of the Privacy Commissioner of Canada, and to the Information and Privacy Commissioner of Ontario where the matter concerns an Ontario public sector body.

9Where the data sits

Our host and our form service both operate infrastructure outside Canada, so an enquiry submitted through this website may be processed or stored outside the country and may be subject to the laws of the place it is processed in. If data residency is a requirement for you, and for a municipality it often is, raise it with us before you send anything sensitive through this form, and use the phone number in clause 1 instead.

10Children

This is a business tool for permit work. It is not directed at children and we do not knowingly collect anything from them.

11Changes to this notice

When this notice changes, the version and effective date in the titleblock at the top change with it, and existing clauses keep their numbers so that a citation to clause 5 still means clause 5. A change that materially affects what we do with information already sent to us will be told to the people it affects, not just posted here.

This is version 1.0, effective 10 August 2026.