Privacy Policy

Last updated: November 1, 2026

1. What we collect

Your email and password (stored hashed), the project information you enter (scope, budget notes, timelines), photos and sketches you upload, chat messages with the agent, and billing status. If you request drone, contractor, or municipal workspace access, we also collect your organization or business name, professional role, jurisdiction or service area, requested use case, request status, and internal review notes. We keep standard server logs, a record of AI runs (model used, status), and first-party product events such as landing-page visits, signups, access requests, project creation, and purchases. When you arrive through an advertising link, we retain campaign parameters and Google advertising click identifiers so we can attribute those product events to the campaign.

2. How your data is used

To run the product: your project context and messages are sent to our configured AI model providers to generate designs, plans, estimates, and supported drone-workflow findings. Access-request details are used to review the requested workflow, business, operator, or government relationship, identity, and tenant fit; submitting a request does not grant access to an organization. Payments are processed by Stripe — we never see your card number. Hosting and storage run on our infrastructure providers. We do not sell your personal data or use it for third-party advertising.

3. Permit checks and your local government

Some townships, cities, villages, and counties use a Munibot municipal workspace. When a permit check you run is grounded on one of them (based on your project's address), that office's staff see the check only inside aggregate counts: how many checks were run, by project type, by how each report was researched, and when. They do not see your name, email, address, project name or description, photos, messages, or the report itself.

You can choose to share an individual permit report with that office from the report page. Its staff can then read that report and its project type (the report is written from your project's details, so it may repeat your project's name or address) and record corrections where it states a local rule incorrectly. Sharing never includes your name, email, photos, messages, or other projects. You can stop sharing at any time, and staff lose access to the report when you do; corrections they already recorded stay with that office. Staff write a correction as a general rule and must confirm it names no resident, address, or other personal detail, because it is shown to other residents in later permit checks for that kind of project in that jurisdiction.

4. Cookies

We use a session cookie to keep you signed in, preserve referral and campaign parameters, and connect anonymous funnel steps to your account after signup. We use local storage for your theme preference and to prevent the same advertising conversion from being reported twice. When Google Ads measurement is enabled, Google's tag may set or read advertising cookies and receive page, conversion, device, campaign, and click-identifier data to measure whether an ad led to a signup, project, or purchase. We use this for advertising measurement, not to sell your personal data.

If you choose Continue with Google, Google authenticates you and shares your stable account identifier and verified email address with us. We use that information only to create, link, and sign in to your Munibot account; we do not request access to your Google files, contacts, or other account data.

5. Retention & deletion

Your data is kept while your account is active. Deleting your account (Account page → "Delete my account") permanently removes your projects, photos, conversations, permit reports (shared or not), and credit history. Billing records are retained as required for tax and accounting.

6. Your rights

You can access and update your details on the Account page, export your material lists as CSV, and delete your account at any time. For anything else — including data access or deletion requests — email privacy@munibot.pro.

This is a starting template and not legal advice — have an attorney review before launch (especially for GDPR/CCPA applicability).