Privacy Policy

This Privacy Policy describes how PlanSift (“we,” “us,” or “our”) collects, uses, and discloses information when you use our website, applications, and related services (collectively, the “Service”).

PlanSift is a decision-support platform for permit precheck, zoning guidance, correction workflows, and human-led review support.PlanSift does not approve permits and does not replace any authority having jurisdiction.

We collect information you provide directly, information generated as you use the Service, and a limited set of technical signals from your device. Categories are described in the following sections.

• Name, work email, and password credentials.
• Organization name and role within an organization workspace.
• Profile preferences, such as notification and display settings.

• Project metadata such as address, parcel, scope, and status.
• Workspace membership and assigned roles.
• Internal notes, comments, and collaboration history.

You may upload permit packages, drawings, calculations, applications, and supporting materials. Uploaded permit documents may include sensitive project information such as site plans, owner details, structural details, and contractor information.

You are responsible for confirming you have the right to upload any document you submit, and for redacting information you do not wish to share with collaborators on your workspace.

When you contact us through the website, sales intake form, or support channel, we collect the message contents, your contact details, and any context you choose to share so we can respond.

• Pages and features accessed within the Service.
• Approximate location derived from IP address.
• Device, browser, operating system, and language settings.
• Diagnostic logs used to investigate errors and abuse.

We use a small number of strictly necessary cookies for sign-in, security, and core functionality. Other categories are off until you opt in. See our Cookie Policy for details, and use cookie settings to change your choices.

• Provide, maintain, and secure the Service.
• Process precheck reviews and generate decision-support outputs.
• Communicate about your account, projects, and support requests.
• Detect, investigate, and prevent abuse, fraud, and security incidents.
• Comply with applicable legal obligations.

PlanSift uses automated processing, including AI models, to read uploaded documents and produce checks, summaries, and suggested corrections. AI outputs are decision-support only and must be reviewed by qualified humans before action is taken.

Specific model providers, retention windows, and training-use terms must be reviewed and disclosed for this workspace before launch launch.

• With members of your organization workspace, based on assigned roles.
• With service providers acting on our behalf, under contract.
• When required by law, court order, or to protect rights and safety.
• In connection with a merger, acquisition, or asset transfer, with notice where required.

A list of subprocessors used to operate the Service is available on request from legal@plansift.site.

Retention periods for account data, project data, uploaded documents, and audit logs are configured per workspace and provided in your service agreement.

PlanSift is SOC 2 Type II compliant as of November 2025, with a scope covering Security, Availability, and Confidentiality. An ISO 27001 program is in progress with a target of Q4 2026; no ISO 27001 certification is claimed today.

Data is encrypted with TLS 1.3 in transit and AES-256 at rest. Data residency is US-East-1, Virginia.

• Role-based access control roles: Viewer, Editor, Project Admin, Organization Admin.
• SAML 2.0 is supported. MFA is required for all Admin roles.
• Subprocessors: AWS hosting and OpenAI API-based processing under an Enterprise Privacy Agreement.

• Active packets: retained for the project duration plus 1 year.
• Audit logs: retained for 7 years.
• Temporary cache: retained for 30 days.
• Hard delete of all customer data within 30 days of contract termination.

Customer data is not used for foundational model training. Retrieval-augmented generation is used only for context within isolated tenant environments.

• Automatic actions: metadata extraction and version comparison.
• Human-required actions: zoning determination, final packet sign-off, and correction confirmation.
• A confidence score below 0.85 triggers a Manual Review Required state.

AI-assisted. Source-linked. Human-led. PlanSift prepares readiness signals for human review. Licensed professionals and official reviewers make final determinations. PlanSift does not approve permits, certify code compliance, or issue official zoning determinations.

• Update profile and notification preferences from your account settings.
• Request export or deletion of account data through legal@plansift.site.
• Manage cookie categories using cookie settings.

You can manage marketing email categories at any time on the email preferences page, or unsubscribe using the link included in any marketing email. Transactional emails related to account security and active projects are not opt-out.

The Service is intended for professional and organizational use and is not directed to children under 16. We do not knowingly collect personal information from children.

If you access the Service from outside the operating jurisdiction of PlanSift, your information may be transferred to and processed in other countries. The specific transfer mechanisms must be reviewed for this workspace before launch launch.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page and, where appropriate, by additional notice.

For privacy questions, contact legal@plansift.site.