Privacy & Terms
Last updated: August 23, 2026 · PermitSiren is operated from Belgium. We built this service with radical transparency — this document describes exactly how your data is handled.
1. Information We Collect
- Account Information: Your work email address, selected trade categories, and coverage territories specified at signup.
- Public Register Data: Public building permit records, published by municipal, county, or national statutory authorities. These are open government records by law; we redistribute and index them with official citations.
2. Lawful Basis for Processing (GDPR)
We process subscriber account information to provide the alert service you requested (contract performance, Art. 6(1)(b) GDPR). We process public-record permit filings under legitimate interest (Art. 6(1)(f) GDPR): notifying trade professionals of statutory construction activity. We never build behavioural dossiers on homeowners or private individuals.
3. Data Retention
Public permit records are retained for 12 months for historical search capability. Subscriber accounts are maintained until you choose to unsubscribe. Unsubscribing permanently deletes your subscriber record within 24 hours.
4. Your GDPR Rights
You have full rights to access, correct, export, or erase your account data at any time. Email contact@permitsiren.com — requests are fulfilled within 72 hours. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).
5. Infrastructure & Sub-Processors
- Cloudflare — CDN, edge computing workers, and D1 database storage. (Covered by Standard Contractual Clauses).
- Brevo — Transactional alert email dispatch. (EU-resident data center).
We never sell, rent, or trade your contact information to third parties.
6. Acceptable Use & Marketing Regulations
PermitSiren provides intelligence from statutory public records. When contacting property owners or applicants, you are responsible as an independent contractor for adhering to local telemarketing and advertising regulations (TCPA and CAN-SPAM in the US; GDPR and telemarketing registries in NL/BE).