permit.systems is QA/QC hold-point sign-off software for steel fabrication. This page says what we collect, where it goes, and what we do with it — in the plainest terms we can manage.
The short version. We hold the drawings you upload, the jobs built from them, and the sign-offs recorded against them. We never publish anyone's name, employee number or signature. If you connect a Google Drive, we can only see the files this app puts there — nothing else in your Drive, ever.
permit.systems is operated by DeStore Network. Reach us through the contact form on our home page.
When you sign in we record the email address you sign in with, the wallet address created for that sign-in, and when you last signed in. Sign-in is handled by thirdweb; we never see or store a password.
Drawings you upload, the jobs and assemblies read from them, documents you attach, the brand details you enter, and every hold-point sign-off recorded against a job.
A tradesman signing a hold point gives a name, an employee number and a drawn signature. They do not have an account and are not asked to create one. That information belongs to the shop whose job it is.
It is never published. The public verification page shows that a hold point was released and when — never by whom. Nothing personal is written to any public record or blockchain.
Ordinary server logs, and error reports when something breaks. We do not use advertising trackers or third-party analytics that profile you.
Connecting a Drive is optional. The app works fully without one.
We request one Drive permission:
https://www.googleapis.com/auth/drive.file. This is Google's
narrowest Drive scope. It lets an app see and manage only the files
that app created.
| We can | We cannot |
|---|---|
Create a Permit Systems folder and its subfolders. Write your
drawings, QA packs, attachments and reports into it. Replace a file we
previously wrote when you update it here. |
See, open, list, download or modify any other file in your Drive. Browse your folders. Read anything you created yourself or anyone else shared with you. |
We also request your Google account's email address, solely so the app can show you which account is connected.
The token that keeps the connection alive is stored on our servers and is never sent to your browser. Disconnecting a Drive in Settings deletes it. You can also revoke access at any time from your Google account's security settings — files already written stay in your Drive and are yours.
Google user data obtained through these scopes is used only to provide the Drive filing feature described above. We do not sell it, use it for advertising, or use it to train any model. It is not transferred to anyone except the infrastructure providers listed below acting on our instructions.
| What | Where |
|---|---|
| Drawings, packs, job records | DeStore Network storage (Cloudflare R2 and D1) |
| Hold-point state, tradesmen log | Vercel KV |
| Accounts and teams | DeStore Network user database |
| The site and its API | Vercel |
| Sign-in | thirdweb |
| Reading drawings | Anthropic — a drawing is sent to be read for its hold-point table, and is not used to train models |
| Your Drive copy, if connected | Google Drive, in your own account |
People on your account see your jobs, drawings and sign-offs. Nobody outside it does.
Anyone holding a printed drawing can scan its code and sign a hold point on it — that is the product, and it is why a code is only ever printed onto a drawing that is already in the right hands. A scanned code shows the assembly and its hold points. It does not show the tradesmen log, and it does not show who signed what.
We do not sell your data or share it with anyone for their own purposes. We disclose it only where the law requires it.
Your jobs and their records stay until you delete them or close the account. A QA record is evidence of work done, so we do not quietly expire it. Ask us to delete an account and we will, within 30 days.
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Send the request through the contact form on our home page and we will reply to the address you give us there.
If you are a tradesman who signed a hold point and want your details removed, contact the shop whose job it was — it is their record. They can reach us if they need help.
If we change this materially we will say so here and update the date at the top.