Privacy policy
Last updated November 2, 2026
What we collect
- Your account: your email address, your company name if you give it, and your password (stored only as a one-way hash).
- The packages you check: the files you upload. They often contain the property owner's name and address, the contractor's details and the job value.
- Reports: the result of each check (what we found, the town, the permit type and the values we read), and your answers to "Was this right?".
- Payments: if you start a plan or buy permits, Stripe handles the payment. We receive what was bought, the amounts and dates, Stripe's references for you and your payments, and an identifier Stripe gives your card (not its number) so that each card gets one free trial. We never see or store your card number.
- Your team: if you're on a team, the team's name, its members' email addresses and the invitations the owner sends (the email address it goes to).
- Security logs: IP addresses of sign-in and sign-up attempts, kept for 24 hours to stop abuse.
How long we keep it
- Uploaded files stay with their report, so you can fix the package from the report (answer a question, confirm an item, get the town's form filled in) and see it checked again without uploading. They are deleted after 30 days, or as soon as you delete the report or your account.
- Reports (the findings, without the files) are kept in your account for 365 days so you can come back to them.
- If you tick "Share this package", we also keep a copy for up to 365 days to test and improve the checker, then delete it.
- Deleting your account deletes your reports and any package you shared, right away. Records of payments (what was bought, the amount, the date and Stripe's reference) are kept as tax law requires.
Who sees it
- Only you can see your reports, and the people on your team when you're on one (a team shares its checks). SunnyCheck staff can see them to answer your questions and to fix the checker.
- When you tick "Look up the property", the folio and the job address (nothing else) are sent to the county Property Appraiser, the U.S. Census geocoder and FEMA's flood map service to read the owner of record, the town and the flood zone.
- We use a hosting provider to run the service, an email provider to send account emails and Stripe for payments. They process data only to provide those services.
- We don't sell your information or the information in your packages, and we don't use it for advertising.
Your choices
- Sharing a package is optional, per check. You can ask us to delete a shared package at any time.
- You can delete your account from the Account page, or ask us to: write to hhopkins@sunnycheckpermits.com.
Contact
Questions about this policy: hhopkins@sunnycheckpermits.com.