Who provides the service
PermitLane is provided by SPAKLABS AI INC. Contact hello@permitlane.ca for support, privacy requests and account recovery. Support is best effort on Alberta business days, with no guaranteed response time.
Account and company information
The application uses sign-in email addresses, company memberships, roles, project responsibilities and security records to provide access to the right workspace.
Project records and documents
Project work can include client and property details, requirements, dates, document records, municipal submission records and inspection outcomes. Access is scoped to the company and the user’s permissions.
A homeowner link exposes a limited server-selected update. It does not expose private documents, internal notes or the full project record. Links can expire or be revoked by an authorized team member.
Payment information
Card information is entered on Stripe-hosted checkout or subscription-management pages, not in PermitLane. PermitLane sends a subscription request and an opaque company purchase reference. It retains the minimum associated customer, subscription, invoice and payment references, amounts, currency, service dates and verified outcomes needed for access, reconciliation, refunds and disputes. PermitLane does not retain full card details or raw payment-event bodies.
Stripe processes billing and transaction details and may retain them after a subscription ends for legal, financial and fraud-prevention purposes. Its policy describes transfers of Canadian personal data to the United States and processing in other countries, including India. Stripe’s retention periods depend on its legal, financial and fraud-prevention purposes; PermitLane cannot promise a complete provider-purge date.
Financial records and company deletion
SPAKLABS AI INC. retains the minimum financial records needed to support its transactions: billing identity and address, accepted offer and policy versions, invoices and receipts, service periods, amounts and taxes, payment references, and relevant refund or dispute outcomes. The ordinary minimum is six years after the end of SPAKLABS’ last relevant fiscal period. Filing, adjustment, appeal or preservation requirements may require longer retention. Records are reviewed when their retention period ends; deletion depends on whether their purpose and applicable holds have ended.
The financial-retention period does not extend the retention of project content or the trial’s 24-month eligibility record. Project names, site addresses, drawings and uploaded evidence must not enter financial custody unless specific evidence is required for an actual dispute, with a recorded purpose and review date.
Application and file providers
Hostinger hosts the application and database on the selected VPS in the United States. Backblaze stores primary customer files in its CA East region in Canada; account and support processing also involves the United States. Hostinger’s residual retention and Backblaze’s exact backend purge timing remain unverified.
GitHub stores PermitLane’s encrypted nightly backups as artifacts of a private repository for seven days, and a copy taken before each release for two days. GitHub receives only the encrypted file, its checksums, sizes, record and file counts, capture times and the software version; the key that decrypts it is held by SPAKLABS AI INC. and never enters GitHub. GitHub processes data in the United States and other countries; its exact residual purge timing and support processing locations remain unconfirmed.
Email and abuse protection
Resend processes sign-in codes, invitations and service notices. Its normal retention for email bodies and request logs is 30 days. Complete residual purge timing, backup periods and some support or subprocessor processing locations remain unconfirmed. Email messages can be delivered outside Canada.
Cloudflare Turnstile processes access and device signals to help prevent automated abuse. Some signal processing supports service improvement. Its exact signal-retention period, processing countries and complete service-specific subprocessor list remain unconfirmed. Essential session and security controls are separate from the visit counting described below.
Model processing and limits
Project permit applicability uses Claude Haiku 4.5 through OpenRouter and Amazon Bedrock. For a project permit check, PermitLane sends scope text, municipality and project type, the candidate permit and recorded official-source references and descriptions. Separate client, contact, property-address, billing and recovery fields, and uploaded files are excluded. Scope text may itself contain private information. The project action shows the processing notice and records the processing request for the exact scope and snapshot. Accepting subscription terms alone does not start a project permit check. Missing or unusable responses remain unconfirmed and municipal submission and approval remain external.
The qualified route requests zero data retention and disallows provider data collection and project prompt caching, with no provider fallback. This does not promise Canadian-only processing or the absence of operational records. Structured-output grammar may be cached separately from project prompt content. Provider facts are checked before dispatch; an unavailable or changed contract can stop processing.
Cookies and tracking
The home page, the subscription page, the account-creation page and the Calgary permit guides count visits using PermitLane’s own analytics, running on PermitLane’s servers and origin. It records the page, the time, whether the visit followed a paid search advertisement, whether someone used the link that opens the account-creation page — and on a permit guide, which guide that link was on — and an approximate location: country, region and city, estimated from the network address your request arrives with. That estimate is frequently the city your internet provider routes through rather than where you are; only those three names are stored, and the network address itself is not. On permit guides, it also records when at least half of the trial button at the end of the guide is on screen for one continuous second in the foreground. This is recorded at most once per page view, including whether the visit came from paid search. It does not show whether you read the guide. It does not use cookies for this, does not identify you, does not record what you type and is never loaded inside your company workspace. Query strings and fragments are removed before anything is recorded, and a browser sending “Do Not Track” is not counted. No advertising pixel or third-party analytics service is used. Application sign-in uses an essential session cookie. Technical requests may generate access and security records.
Separately from that counting, when you arrive from a Google Ads advertisement, the click identifier that Google appends to the address (gclid) is kept in your browser’s own storage for up to 90 days. It is never sent to PermitLane’s analytics, and it is not read from a browser sending “Do Not Track”. If you create a company account within those 90 days, that identifier is recorded beside the account creation and removed from PermitLane’s records once 90 days have passed. In that time PermitLane may report to Google Ads that the click led to an account being created and, if the company then subscribes, to a first payment, by uploading the identifier, the name of the event and the time it happened. No name, e-mail address, company name, project or other account detail is sent to Google, and no other advertising identifier is read.
PermitLane keeps monthly records indefinitely to measure what its Google Ads advertising produced. Each record counts self-service trials started after an advertising click in a calendar month that has ended in Edmonton. For months with at least five such trials, it also records how many made a first payment, the total of those first payments in Canadian dollars when the amounts are known, and the portion paid more than 90 days after the click. Below five trials, only the trial count is kept. These records contain no click, account, company or other identifier, and no date finer than the month. Updates stop before the month’s click records can begin to expire, or if a previously counted trial is no longer available. The saved figures are observations, not complete lifetime revenue: later payments and payments after a click record has been removed cannot be attributed. Click identifier retention remains 90 days. The monthly records are never sent to Google.
Following a payment or subscription-management link opens Stripe’s separate service, which has its own privacy and security practices. PermitLane does not embed payment forms or enable optional website analytics through acceptance of these terms.
When paid access ends
Authorized reading, export, recovery and safe revocation remain available for 60 days after the verified paid-through instant for cancellation or failed renewal, or after the verified full-refund or dispute cutoff. The 72-hour manual-work grace does not extend this window. Public homeowner links stop at the original cutoff. A dispute hold prevents deletion without restoring writes.
Transactional notices are scheduled at the cutoff and 30 and 53 days later. A failed, missing or uncertain delivery requires review before deletion. Normal access closes after 60 days, followed by a seven-day disposition review; silence alone never authorizes deletion.
Before company deletion, PermitLane must resolve notice delivery and preservation holds, and verify a complete export package with the authorized customer’s acknowledgement, or the customer’s explicit verified request declining export and requesting deletion. A prepared download, incomplete package or silence is insufficient. A hold suspends deletion without restoring normal product writes.
Company deletion requires completed export or an explicit verified decision declining export, notice review, the seven-day review period and resolved preservation holds. Before deleting paid-company operational data, SPAKLABS AI INC. must verify that the necessary financial records are complete and held in restricted Canadian custody under its control. Deleting PermitLane records does not confirm deletion of copies held by providers.
Deletion of paid-company data is not yet available. You can contact hello@permitlane.ca to request an export or retention review. Continued retention must have a recorded purpose and review date.
Recovery and backup copies
PermitLane takes an encrypted backup of company records and accepted files every night and keeps the seven most recent copies outside the application host. Keep your original files and export your records regularly: a backup is a recovery aid, and recovery of lost customer data is not guaranteed.
After primary deletion, the target is to rotate ordinary encrypted backups containing deleted data within 35 further days, unless an applicable preservation hold requires longer retention. This is not a guarantee that every provider copy is erased within 35 days. The limited trial-use record follows its separate 24-month period. Completed deletions must be reapplied before restored data becomes accessible.
Access, correction and privacy requests
Contact hello@permitlane.ca to request access, correction, export or deletion. PermitLane verifies your identity and company authority before acting; knowing a company or project identifier does not authorize access. Do not email payment cards, recovery codes or private documents unless a separately authorized secure process has been provided.
What changed in version 9
Version 9 adds measurement of whether the trial button at the end of a permit guide was on screen, and separates clicks on that button from the header link for visits from paid search. Visibility does not establish reading. Every other paragraph is unchanged. Version 8 stays published at its own address with every acceptance recorded against it.