Legal

Privacy

Effective 31 October 2026.

Who We Are

Marden Yard and its Permit Digest product are operated by Legacy Bridge Holdings Atlanta, LLC (“we”). This policy covers mardenyard.com, permitdigest.app, the Permit Digest API and MCP server, and the emails we send.

Permit Records

We store public building permit records as cities publish them, with one rule applied before anything is saved: homeowner names and personal phone numbers are never stored. Applicant name and phone fields, contractor phone fields, and Chicago contact names whose role is “owner” are removed at ingest. What we keep is the site address, the work described, the dates and status, the permit-declared value, and the contractor’s business identity where the city publishes it.

If you are a homeowner and believe a record on this site contains your personal information, write to privacy@mardenyard.com with the permit id and we will review it.

Contractors

Contractor business names appear because cities publish them on permits. We group name variants into one entity and show the evidence. We do not publish reviews or ratings. A contractor who believes a record is attributed to them in error can dispute it at privacy@mardenyard.com.

Account Holders

If you create an account we store your email address, sign-in events, API keys (hashed), watches you set up, and your subscription status. Payments are handled by Stripe; we store a Stripe customer id and subscription id, never card numbers. We use your email to send sign-in links, your digests, and account notices. We do not sell or rent personal information, and we do not share it for cross-context advertising.

Agents and API Use

We log tool calls made with your API key (tool name and time) to meter your allowance and to debug the service.

Cookies and Analytics

A session cookie keeps you signed in, and a small browser setting remembers your light or dark theme. We use Google Analytics to count visits and see which pages are used; it sets its own cookies and sends page views, device and approximate location data to Google. You can block it with your browser’s tracking protection or Google’s opt-out add-on. We do not run advertising trackers.

Service Providers

These companies process data on our behalf, only to run the service:

• Cloudflare hosts the site and serves every request.
• Supabase runs sign-in and the database that holds accounts and permit records.
• Stripe processes payments and subscriptions.
• Resend delivers sign-in and digest emails.
• Google provides analytics and the web fonts the pages load.

Retention

Account data is kept while your account is open. When you ask us to delete your account we remove your email, watches, keys and usage logs within 30 days, except billing records we must keep for tax and accounting, which Stripe and we retain as the law requires. Permit records are kept as part of the public dataset.

Your Choices and Rights

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account. Email privacy@mardenyard.com from the address on your account. Residents of California and other states with privacy laws have these rights by law; we extend them to everyone and will not treat you differently for using them. You can stop digest emails at any time from your account.

Children

The service is for businesses and is not directed to children under 16. We do not knowingly collect their information.

Changes

If we change this policy in a way that matters, we will update the date above and tell account holders by email before the change takes effect.

Contact

privacy@mardenyard.com or by post to the address above.