Privacy Policy

Last updated October 19, 2026

PermitWinner is operated by Cipherion Inc. This policy explains what we collect, why, and the choices you have. It covers two groups: subscribers (contractors who buy leads) and people whose property addresses appear in our leads.

Property and project information

Our leads are built from publicly available property and project records. A lead can include a property address, the type of project, a project reference number, its value and status, and related dates. We do not collect owner names, phone numbers, or email addresses, and we remove any personal names or contact details as soon as we receive a record. We use this information only to produce marketing leads for subscribers, under terms that ban use for credit, insurance, employment, or housing decisions.

Want your address left out? Email support@cipherioninc.com with the address. Within 10 days we remove it from current leads and keep it out of future ones.

Subscribers

• Account: email, company name, plan, trades, cities, and email preferences.
• Sign-in: handled by Amazon Cognito with an authenticator app. We never see your password.
• Payments: handled by Stripe. We receive your plan and subscription status, never your card number.
• Email: sent through Brevo. Every lead email has a one-click unsubscribe link.

We use this information to run your subscription, send your leads, and keep the service secure. We don't sell it or use it for advertising.

Service providers

Amazon Web Services (hosting, storage, sign-in), Stripe (payments), and Brevo (email) process data for us under their own security and privacy terms. Data is stored in the United States.

Security

Data is encrypted in transit and at rest; subscriber records use an encryption key we control, and every use of it is logged. Access is limited to the systems that need it. Sign-in requires an authenticator app.

Keeping data

• Leads expire after 180 days; raw source files are deleted after 180 days.
• Subscriber records are kept while your plan is active and as long as needed for billing and legal records afterward. Ask us to delete your account at any time.

Cookies

We don't use advertising cookies. If you click Accept on the analytics banner, we use Google Analytics 4 to count page visits and steps like starting checkout; Google signals and ad personalization are off, and we never send your email, addresses, or anything you type. If you click Decline, Google Analytics doesn't load. Signing in stores a session in your browser tab that ends when you close it.

Your choices

You can see and change your cities and email settings in your dashboard, unsubscribe from lead emails at any time, and ask for a copy or deletion of your data at support@cipherioninc.com.

Changes

We'll post updates here with a new date and email subscribers about material changes. See also our Terms of Service.