PILOT INFORMATION

Privacy, plainly.

Effective October 18, 2026. NC Building Permits is operated by YAAPI Software Company.

What we store

We store the contact information and optional company, trade, use-case, and jurisdiction details you submit, suggested official source URLs, request review status, and operator review notes. Pilot accounts contain an email address, a hashed password, account permissions, and server-side session records. Invitation links expire after seven days and can be used once.

Why we use it

We use this information to review pilot access and coverage requests, maintain accounts, protect the service, and respond to your request. Submitting a request does not enroll you in automated marketing. The pilot does not have automated email alerts, payments, or advertising trackers.

Cookies and security

Essential session and CSRF cookies support sign-in and secure forms. Request-abuse controls store a keyed hash of the connecting network address in windows that expire within two hours and are removed on subsequent protected requests (sign-in windows are shorter). We do not store your raw network address in the application request database. Hosting providers may retain operational access logs, including addresses and request paths. Do not share invitation URLs.

Permit data

Permit records come from the City of Raleigh via YAAPI Data Platform. They can contain public addresses and contractor names supplied by the publisher. Search terms are sent server-side to that data service; request URLs may appear in operational logs. Avoid entering private or sensitive information into search fields. Source records can be incomplete or outdated.

Storage, retention, and choices

The application stores requests and accounts in a separate PostgreSQL application database hosted on Railway. Data is accessible to authorized operators and service providers required to run the application. Requests are retained during the pilot for review; operators review retention at least every 90 days and remove requests no longer needed. Account and request deletion is available through the operator, subject to legitimate security and operating needs. Backups may retain deleted information until their retention window ends.

Contact and corrections

Use the YAAPI Software Company website to contact the operator about access, correction, or deletion. Publisher record corrections should also be raised with the issuing authority. We do not sell the contact information you submit.