Legal
Privacy policy
Last updated October 8, 2026
Manhole Permit Log ("we") helps small water, sewer and public works utilities keep their confined space entry records. We don't sell your data and we don't show ads.
What we store
- Your account: your email address and a securely hashed password, handled by Amazon Cognito.
- Your utility's records: its name and state; each confined space with its type, location, known hazards, classification and optional photo; gas meters; bump test and calibration records; entry permits with the people named, the hazard controls and rescue plan; timestamped gas readings and any corrections; team roles; and the dates things were added.
- Crew and training: each crew member's name and optional work email, and for each training record the duty, date, trainer, expiry and optional certificate copy. We don't ask for dates of birth, Social Security numbers or medical information.
- Attachments: training certificates, gas meter dock reports and space photos, stored privately in Amazon S3 and shown only through short-lived signed links.
- Page-view analytics: the page visited, referring site, browser user agent, rough location when available, and a one-way hash of the IP address that changes daily. We never store the raw IP address.
- Feedback you send, with your email if you give it.
- Billing: Stripe processes payments. We store Stripe customer and subscription IDs and your plan, never your card number.
Read-only links
The admin can create a read-only link to the yearly review packet, including its attachments. Anyone with the link can open it without signing in, so share it only with the insurer or inspector who needs it. Turning the link off stops it working at once.
We send sign-in codes and invites. We don't send marketing email.
Cookies
We use first-party cookies to keep you signed in and random IDs to count visits and sessions. We do not use third-party advertising cookies.
Who processes your data
Amazon Web Services provides hosting, database, file storage, and sign-in; Stripe processes payments; and Resend sends email. Each processes data only to provide its service to us.
How long we keep it
Your records stay until you ask us to close the account. Confined space rules require canceled permits to be kept for at least a year, so the app never deletes records on its own. Analytics are kept in aggregate form for as long as they remain useful.
Your choices
You can export permits, readings, bump tests, training and other records as CSV, or print the yearly packet. To get a copy of everything, correct personal information, or delete your account and utility data, contact us.
Contact
Questions about privacy: use the feedback form.
