Effective October 20, 2026
Permit Plotter is a map of public building permit records for the East End of Long Island, New York. It is operated by Permit Plotter, LLC, a Delaware limited liability company (“we”, “us”, “our”), which is responsible for the information described here.
This policy explains what we collect from the people who visit and use the site, who else handles it, and what you can do about it. If you are named in a permit record, Section 9 is written for you; the records themselves are also covered by our Terms and Conditions.
Without an account you reach only our landing page, whose map dots are decorative and correspond to no permit, property, or person. We collect the following from every visitor.
Usage analytics. A United States analytics service records pages viewed, clicks, device and browser information, your approximate location from your IP address, and product actions we choose to measure. We do not send search text as an analytics event: we record only a search’s length and whether it contains digits, and we scrub search text from the page addresses sent to analytics.
Session replay. The same service records how pages are used (clicks, scrolling, and what the page displays) so we can see where the site confuses people or breaks. Text you type into an input is masked, but text the page itself displays, including a search it echoes on screen, can appear in a recording. It also collects performance measurements, heatmaps, and browser console logs.
Error reports. When something breaks, a United States error tracking service receives the error, a stack trace, and details about your browser, and its type and file location go to our issue tracker so it gets fixed.
Map tiles. Your browser loads map tiles directly from our mapping provider, which sees your IP address and the map areas you view and may collect its own usage data under its own privacy policy.
Your IP address. Our servers use your IP address to limit repeated sign-in and download attempts.
Searches and filters. What you search and filter goes to our database, hosted by our backend infrastructure provider, because that is how the site answers your query. Searching requires an account, and no town or village sees what anyone searches.
When you create an account or subscribe, we also collect the following.
Signing in. A United States sign-in service collects your name, email address, login credentials, and any organization membership.
Paying. Your card and billing details go directly to our payment processor and never touch our servers. We receive your subscription status and billing identifiers so we know what your account includes.
Analytics and errors, tied to your account. Once you sign in, the analytics and error reports in Section 2 are linked to your account (your user id, email address, name, and, on an organization’s plan, its id) so we can support you and understand how customers use the service. Our servers also send account events, such as starting or changing a subscription, to our analytics service under your user id.
Email alerts you save. For each alert we store the email address it goes to (from your sign-in), the saved search criteria (including any search text), and a log of what each alert email contained. A remembered map view is also stored with your account.
API keys. If you use our API, we issue keys tied to your account.
AI assistant connector. You connect an AI assistant by signing in with your Permit Plotter account, which gives the assistant an access grant tied to that account. With each request, the connector receives that grant and the search filters and permit lookups your assistant chooses to send. It does not receive or read the rest of your conversation, your assistant’s memory, or your files. The permit records it sends back can include owner names and mailing addresses from public building permit records (Section 9) and contractors’ office phone numbers and email addresses; we do not send a homeowner’s phone number or email address. Your assistant’s provider receives those records and handles them under its own terms and privacy policy, not ours.
What the connector keeps. The infrastructure provider that runs the connector logs each request: the time, the address and kind of request, the result, your IP address and approximate location, and the software making the request. Those logs are kept for up to seven days, and we use them to fix problems. Daily usage counters, such as each account’s requests and each IP address’s sign-in attempts, are kept for about a day to enforce our limits. Your access grant (your user id, email address, and when you connected) is stored encrypted and kept until it expires or is revoked; you can disconnect the connector in your assistant at any time. A spreadsheet link holds only the filters for the file and your account and organization ids. It works once and expires after ten minutes, and the file itself is built only when the link is opened and is not stored by the connector. Each download is recorded as described below.
Maps and fonts in the connector. The connector’s sign-in and help pages load fonts directly from our font provider. The map card that some assistants show loads the map and its labels directly from our mapping provider and uses your assistant’s own fonts. The mapping provider sees your IP address and the map areas you view, and both providers may collect their own usage data under their own privacy policies.
Downloads you make. For each download we record who took it, when, a short summary of its filters, how many rows it held, and whether it was allowed, to run the download limits and spot misuse.
Invitations. If we invite you, we store your name, email address, the invitation code, and whether our email was delivered. For every email we send, we record whether it was delivered or bounced.
Affiliate program. If you apply to our affiliate program, we store your application: your name or business name, mailing address, email address and the language you applied in, your answers to three questions (why you would be a good affiliate, your sales experience, and who you would share your link with), and the version of the affiliate terms you accepted and when. As you type your street address, our mapping provider suggests full addresses (Section 4). We usually email the application to our team so we can review it. If we decline it, we delete it 30 days after we decline it. If we approve it, we may email you to say so, you become an affiliate, and we also store your affiliate code and whether you can be paid. Our payment processor collects your identity, bank, and tax details directly on its own form and keeps your identity documents, full bank account number, and tax details; we do not ask for or store them. Through it we can see basic facts about your payout account, such as the name and contact details on it, whether it can be paid, your bank’s name and the last digits of your account, and the tax forms it prepares for us to file. Only if our payment processor cannot pay you and we pay you another way, such as by check, do we ask for and keep a signed tax form (Form W-9) and any proof of identity we need. We also keep a record of each person who creates an account through an affiliate’s link or enters an affiliate’s code: their account id, which affiliate it is credited to and when, and their plan and payments, so we can work out and pay earnings. We tell an affiliate only how many people signed up through their link and, once someone pays, the plan and the month, never who. The records of approved affiliates and the referral records are not deleted: we keep them for at least six years, as New York’s Freelance Isn’t Free Act requires.
Here is what each outside service receives.
Each provider handles data under its own privacy policy.
Alert emails go out through a United States email delivery service, only for alerts you set up yourself. Each includes an unsubscribe link that stops that alert immediately. Beyond alerts, we send only what your account needs: an invitation if we invite you, and subscription messages such as a welcome, a receipt, or a renewal notice.
We do not currently respond to Do Not Track. If your browser sends it, the site behaves the same as it does for everyone else.
The permits on the map are public records from town and village permit filings and county property records. They can include names, mailing addresses, project details and, for contractors and applicants, the phone numbers and email addresses on the filings or on the business’s own website. We make them available to business customers as a research and informational resource. We do not contact anyone named in a record on a customer’s behalf, and we do not direct or take part in any customer’s solicitation or fundraising. How a customer uses a record is that customer’s responsibility, and our Terms require customers to follow the law if they contact anyone, including do-not-call and solicitation rules. Our Terms and Conditions (Section 13 in particular) govern how we present the records.
If a record names you incorrectly, email support@permitplotter.com. We check it against the issuing office’s records and fix any mistake we can confirm.
If you have an account, you may write to legal@permitplotter.com to:
We verify requests by email from the address on the account, and we reply to each one.
When you ask us to delete your account information, we delete the account data we hold and your identity at our sign-in service, and ask our analytics and error-tracking providers to delete your identified data. We keep what we need for security, fraud prevention, legal, or audit reasons, including affiliate and referral records (Section 3), and some of our internal system logs cannot be changed or erased by design.
Full permit data requires a credential, and payment details go directly to our payment processor. Alert and download links expire or can be revoked. We take reasonable safeguards for an operation our size, but no online service can promise perfect security, and we do not.
We keep information as long as we need it to run the service. Account information is kept while your account exists and can be deleted on request (Section 10). Our logs of alert emails, downloads, and invitations are kept while the account exists and afterwards as long as we need them to enforce limits and investigate misuse, even if you delete an alert. Records of approved affiliates and referral records are kept for at least six years (Section 3); a declined affiliate application is deleted 30 days after we decline it. Session replays, analytics, and error reports are kept for the periods our providers apply. For the AI assistant connector, request logs are kept for up to seven days, daily usage counters for about a day, and one-time spreadsheet links for ten minutes; access grants are kept until they expire or are revoked (Section 3).
The service is not directed to children, and we do not knowingly collect information from anyone under 18. If you tell us we have, we will delete it.
When this policy changes, we post the update at this page with a new effective date, and we keep this policy accurate as our practices change.
Questions, corrections, and deletion requests go to legal@permitplotter.com. Concerns about a name in the permit records go to support@permitplotter.com (see Section 9). By mail: Permit Plotter, LLC, P.O. Box 412, Hampton Bays, NY 11946.
This policy is written in English. Any translation is provided for convenience, and if a translation differs from the English version, the English version controls.