Effective: July 25, 2026 · Last updated: July 25, 2026
This Privacy Policy explains how Permitt Holdings LLC, a Texas limited liability company doing business as WhoOwnsTexas (“we,” “us”), handles personal information in connection with whoownstexas.com and the WhoOwnsTexas application (the “Service”). It works alongside our Terms of Service.
The short version. We collect very little about you: an email address, what you do inside the app, and payment records handled by Stripe. We do not sell your personal information, we do not run advertising, and the site loads no third-party analytics or ad trackers.
Separately — and this is the unusual part of a policy like ours — the Service displays Texas government public records about property owners. Those people are not our users. Section 4 explains where that data comes from and how to ask about information concerning you.
| Category | What it includes | Why we have it |
|---|---|---|
| Account | Email address; optional name and company; your hashed password; plan, tier, trial and subscription status; timestamps of logins. | To create and secure your account, provide the Service, and enforce plan limits. |
| Sign-up requests | The email address (and anything else you type) submitted through our access-request form, handled by Netlify Forms. | To provision trial access and reply to you. |
| Billing | Records of payments, amounts, dates, plan, and a Stripe customer reference. We never receive or store your full card number — Stripe processes and holds payment credentials. | To bill you, keep financial records, and handle refunds or disputes. |
| Usage | Queries, filters, searches, saved monitors, exports, feature usage, and technical logs including IP address, browser/device type, and timestamps. | To operate and debug the Service, enforce rate and export limits, prevent abuse, and understand which features are used. |
| AI assistant | The questions you ask “Tex,” the data retrieved to answer them, the responses, and token/usage counts. | To provide the assistant, apply usage limits, and troubleshoot. |
| Support & sales | Emails and notes from conversations with us, including a log of contacts. | To respond to you and keep track of our own business relationships. |
We do not intentionally collect sensitive categories of personal data (such as health, biometric, precise geolocation history, or government ID numbers) about our users. If you use the optional location feature in the map, your device's coordinates are used in the moment to find nearby parcels and are not stored as a location history by us.
We do not use your personal information for targeted advertising, and we do not sell it. We do not use your queries or account data to train our own machine-learning models.
We keep the vendor list deliberately short. Each processes data only to provide its service to us:
| Provider | Role | What it sees |
|---|---|---|
| Supabase | Database, authentication, file storage, serverless functions (US region) | Account, usage, billing-reference, and AI-log data |
| Netlify | Website hosting and the access-request form | IP address and request logs; form submissions |
| Stripe | Payment processing and subscription billing | Your payment credentials, billing details, and transaction history (under Stripe's own policy) |
| Resend | Transactional and product email delivery | Your email address and message contents |
| Anthropic | AI processing for the “Tex” assistant | Your question and the data retrieved to answer it, sent via API for inference |
| CARTO, Protomaps, Google Fonts, jsDelivr | Basemap tiles, map library, web fonts, JavaScript library delivery | Your IP address, as a normal consequence of your browser requesting files |
We may also disclose information: to comply with law, a subpoena, or a lawful government request; to enforce our Terms or protect our rights, safety, or property; to our professional advisers under confidentiality; and to an acquirer in connection with a merger, acquisition, financing, or sale of assets (we will notify you of any such change of control affecting your data).
The core of the Service is a compiled, searchable copy of Texas government public records. This includes property owner names and mailing information, appraised and market values, exemptions, protest history, deed and instrument records, business-entity and officer filings from state registries, alcohol-beverage receipt filings, professional license rolls, and federal flood-zone mapping.
We are not the source of this information. It is obtained from county appraisal districts, county clerks, the Texas Comptroller of Public Accounts, other Texas state agencies, and federal agencies, through public-records requests and publicly published datasets. We do not add information from private data brokers, credit files, or social media, and we do not attempt to determine anything about a person beyond what the government record itself states.
Texas law lets certain people — including judges, peace officers, and victims of family violence — restrict public access to their home-address information in appraisal records. Where a source record carries that flag, we suppress the associated owner identity throughout the Service, including in exports and in AI answers. This depends on the flag existing in the data the county provides to us; we cannot detect an entitlement the county has not recorded.
Note on Texas law: the Texas Data Privacy and Security Act generally excludes lawfully available public records from its definition of personal data. We nonetheless review and respond to owner requests as described above as a matter of practice.
We use browser local storage — not advertising cookies — for two purposes: holding your login session so you stay signed in, and remembering interface preferences such as your filter and sort choices. Netlify may set a strictly necessary cookie for site delivery and security.
There are no advertising, cross-site tracking, or third-party analytics scripts on the site (verified as of the “last updated” date above). Because we do not track you across sites and do not serve ads, there is nothing here for a “Do Not Track” or global privacy control signal to switch off; we honor such signals to the extent they apply.
Practical measures we take: all traffic is encrypted in transit (HTTPS); the property database is never exposed directly to browsers — every request goes through authorization-checked server-side functions restricted to logged-in accounts; administrative functions re-verify administrator identity on the server for every action; sensitive credentials are held in server-side configuration and are not present in the website's code; and confidential-owner suppression is applied server-side rather than in the browser.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by applicable law.
To exercise any of these, write to toby@whoownstexas.com. We may need to verify your identity, and we will respond within the time required by applicable law (generally 45 days). If we decline a request, we will explain why, and you may ask us to reconsider by replying to that response.
The Service is for business and research use by adults. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.
We operate in the United States, and our providers process data in the United States. If you access the Service from outside the U.S., you understand your information will be processed here.
If we make a material change we will update the “Last updated” date, post the revised policy here, and notify active subscribers by email. Adding any new category of data collection, any new vendor, or any tracking technology requires updating this page.
Permitt Holdings LLC d/b/a WhoOwnsTexas
A Texas limited liability company
toby@whoownstexas.com
For privacy requests, please put “Privacy request” in the subject line so we can route it quickly.