Privacy Policy

MiamiPermitAI ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at miamipermitai.com.

• Account information: Email address and password when you register.
• Project data: Building permit project details, property addresses, contractor information, and uploaded documents you submit for analysis.
• Emails you import from Outlook or Gmail: If you connect Microsoft Outlook or Gmail, the emails and attachments you choose to import into a project (see sections 5 and 6).
• Files you import from Google Drive, OneDrive or SharePoint: If you connect one of them, copies of the files you choose to import into a project (see sections 5 and 6).
• Usage data: Pages visited, features used, and interaction patterns to improve our service.
• Consent records: Timestamps and versions of terms you have accepted, and your marketing communication preferences.
• Cookie data: Your cookie consent preferences (see our Cookie Notice).
• Session recordings: We use Microsoft Clarity to capture anonymized interaction data (mouse movement, clicks, scrolls) and occasional session replays of how the platform is used, to understand and improve usability.

• To provide AI-powered permit risk analysis for your submitted projects.
• To improve and train our AI systems and models using the project and permit data you submit (including uploaded documents), so future analyses are more accurate. This does not include emails or attachments imported from Outlook or Gmail, or files imported from Google Drive, OneDrive or SharePoint (see sections 5 and 6).
• To maintain and improve our platform.
• To send transactional emails related to your account and projects.
• To send marketing communications if you have opted in (you may unsubscribe at any time).
• To comply with legal obligations.

We do not sell your personal data. We may share data with trusted service providers (such as Supabase for database hosting, Anthropic for the AI analysis of your project data, Stripe for payment processing, Google Maps Platform for address lookup, and Microsoft Clarity for product analytics and session replay) solely to operate and improve our service. These providers are contractually bound to protect your data.

Connecting Outlook is optional. When you connect it, you sign in with Microsoft and grant MiamiPermitAI permission to read your mail and your basic profile (Microsoft permissions: Mail.Read, User.Read and offline_access). The connection belongs to you alone: other members of your organization, including its owners, cannot browse your mailbox.

• What we read: only the messages you list, search or open in MiamiPermitAI, when you do so. We do not copy or sync your mailbox, and we do not process its history in the background.
• What we store: only the emails and attachments you choose to import into a project: the sender, recipients, subject, date and text of the email, a safe copy for display, Microsoft's message identifiers and link, and who imported it. Imported emails and files become part of that project and are visible to members of your organization who can open the project.
• What we never do: send, delete, move or flag email, mark it as read, or change your mailbox settings. Remote images in emails are not loaded.
• AI extraction: when you press "Extract action items" on an imported email, that email's text and any imported attachments you select are sent to Anthropic to propose corrections, requested documents and deadlines for your review. Nothing is saved until you confirm it. Email content imported from Outlook is not used to train AI models.
• Security: the access tokens Microsoft issues are encrypted and stored only on our servers. They are never shown in your browser.
• Disconnecting: disconnecting in MiamiPermitAI deletes our stored access, so we can no longer read your mail. To also remove the permission at Microsoft, use your Microsoft account's app permissions (personal accounts) or My Apps (work or school accounts).

OneDrive and SharePoint. Connecting OneDrive is optional and separate from Outlook. You sign in with Microsoft and allow MiamiPermitAI to read and create files in your OneDrive (Microsoft permission: Files.ReadWrite). If you use a work or school account and choose to add SharePoint, you also allow it to read and create files in the SharePoint document libraries you can open and to list those sites (Files.ReadWrite.All and Sites.Read.All). MiamiPermitAI can never do more than your own account can.

• What we read and store: we list folders only while you browse in MiamiPermitAI, and copy only the files you choose to import into a project (Word, Excel and PowerPoint files are saved as Microsoft's PDF conversion), with the file's Microsoft identifiers, name, version details, the time and who imported it. Imported copies are visible to members of your organization who can open the project. "Check for updates" reads the current details of those files only when you ask.
• What we write: only when you choose "Save to OneDrive", we create new PDF files in the folder you chose. We never change, replace or delete your files.
• AI and training: an imported file is part of your project, so it is included when you run a permit analysis on that project. Importing alone never starts an analysis. Files imported from OneDrive or SharePoint are not used to train AI models.
• Disconnecting: disconnecting OneDrive deletes our stored access; Outlook keeps working. OneDrive and Outlook use the same MiamiPermitAI app at Microsoft, so removing MiamiPermitAI in your Microsoft account's app permissions or My Apps withdraws the permission for both. Files already imported stay with their project.

Connecting Gmail is optional. When you connect it, you sign in with Google and grant MiamiPermitAI read-only access to your Gmail messages (Google permission: gmail.readonly). The connection belongs to you alone: other members of your organization, including its owners, cannot browse your mailbox.

• What we read: only the messages you list, search or open in MiamiPermitAI, when you do so. We do not copy or sync your mailbox, and we do not process its history in the background.
• What we store: only the emails and attachments you choose to import into a project: the sender, recipients, subject, date and text of the email, a safe copy for display, Gmail's message and conversation identifiers and link, and who imported it. Imported emails and files become part of that project and are visible to members of your organization who can open the project.
• What we never do: send, delete, label or change your email, or mark it as read. Remote images in emails are not loaded.
• AI features: Gmail content is sent to our AI provider, Anthropic, only when you choose "Extract action items" on an imported Gmail message and confirm that you want it sent. The result is shown to you for review. Gmail content is not used to develop, improve or train generalized AI or machine-learning models.
• No other use or transfer: we do not sell Gmail data, use it for advertising, or transfer it to anyone except as needed to provide the features you use, for security, or to comply with the law. Our staff do not read your Gmail content unless you ask us to (for example, for support) or where required for security or by law.
• Security: the access tokens Google issues are encrypted and stored only on our servers. They are never shown in your browser.
• Disconnecting: disconnecting in MiamiPermitAI deletes our stored access and, unless you choose to keep your Google Drive connection, also revokes our access at Google. You can also remove MiamiPermitAI in your Google Account's third-party connections.

Google Drive. Connecting Google Drive is optional and separate from Gmail. MiamiPermitAI asks only for access to the Drive files you open or create with it (Google permission: drive.file). You choose files and folders in Google's own file picker; we cannot browse, search or list the rest of your Drive, and choosing a folder to save into does not give us the files already in it. The connection belongs to you alone.

• What we read and store: only the files you choose to import into a project, when you do so. We save a copy of each file (Google Docs, Sheets and Slides are saved as Google's PDF export), with the file's Drive identifier, name, version details, the time and who imported it. Imported copies become part of that project and are visible to members of your organization who can open the project. When you choose "Check for updates", we read the current details of those files to tell you whether they changed; nothing is imported until you choose to.
• What we write: only when you choose "Save to Google Drive", we create new PDF files (your prepared forms or reports) in the folder you picked. We never change, replace or delete your existing Drive files.
• AI features: an imported file is part of your project, so it is included when you run a permit analysis on that project, which is sent to our AI provider, Anthropic. Importing alone never starts an analysis. Files imported from Google Drive are not used to develop, improve or train generalized AI or machine-learning models.
• No other use or transfer, and security: the same commitments as for Gmail above apply to Google Drive data, including encrypted, server-only storage of Google's access tokens.
• Disconnecting: you can remove our stored Drive access only, or also revoke it at Google. Because Google treats MiamiPermitAI's Gmail and Google Drive access as one app for your Google account, revoking at Google ends both; we tell you before you choose. Files already imported stay with their project.

MiamiPermitAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We retain your account and project data for as long as your account is active. Emails imported from Outlook or Gmail and files imported from Google Drive, OneDrive or SharePoint stay with their project until you remove them from the project or your account is deleted; stored Outlook, Gmail, Google Drive or OneDrive access is deleted when you disconnect. You may request deletion of your data at any time by contacting us.

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact us at privacy@miamipermitai.com.

We use cookies and similar technologies. Please see our Cookie Notice for details.

For privacy-related questions, contact us at privacy@miamipermitai.com.