Privacy Policy

Mistro, LLC | mistro.infoEffective Date: June 1, 2025 | Last Updated: March 5, 2026


Mistro, LLC (“Mistro,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard information when you use our website at https://mistro.info and our Permie application at https://permie.app (collectively, the “Services”). By using our Services, you agree to the practices described in this Policy.


1. Information We Collect

1.1 Information You Provide Directly

When you register, subscribe, or interact with our Services, we may collect:

  • Name, email address, phone number, and company name
  • Billing and payment information (processed securely via Stripe)
  • Permit data, project information, and documents you upload
  • Communications you send us (e.g., support requests, feedback)
  • SMS opt-in consent and related contact preferences

1.2 Information Collected Automatically

When you visit our Services, we automatically collect certain technical information, including:

  • IP address and approximate geographic location
  • Browser type, version, and operating system
  • Device identifiers and mobile network information
  • Pages viewed, links clicked, and time spent on pages
  • Referring URLs and search terms that led you to our Services
  • Session timestamps and interaction logs

1.3 Information from Third Parties

We may receive information about you from third-party service providers, including:

  • Authentication and identity verification providers
  • Payment processors (Stripe) for billing-related data
  • Analytics providers that help us understand usage patterns

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve our Services
  • Process transactions and manage your subscription
  • Send transactional emails (e.g., receipts, permit alerts, account notices) via Resend
  • Send SMS notifications you have explicitly opted into (see Section 3)
  • Respond to support requests and customer inquiries
  • Analyze usage trends to improve product functionality
  • Enforce our Terms of Service and protect against fraud or abuse
  • Comply with applicable legal obligations

We do not sell your personal information to third parties, and we do not use your data to serve third-party advertising.


3. SMS Communications & Opt-In

3.1 Consent

We send SMS messages only to users who have explicitly provided their mobile phone number and opted in to receive text communications. Your consent to receive SMS messages is not required as a condition of purchasing or using our Services.

3.2 Types of SMS Messages

When you opt in, you may receive:

  • Permit status updates and expiration reminders
  • Account alerts and security notifications
  • Service announcements relevant to your subscription

3.3 How to Opt Out

You may opt out of SMS communications at any time by replying STOP to any message you receive from us. After opting out, you will receive a single confirmation message and no further SMS messages, except where required by law.

For help, reply HELP or contact us at support@mistro.info.

3.4 Message & Data Rates

Standard message and data rates may apply depending on your mobile carrier and plan. Message frequency varies based on your account activity and preferences.

3.5 Mobile Information Sharing

Mobile opt-in data and consent records — including your phone number and the date/time of your consent — will not be shared with third parties for marketing or promotional purposes. This information may be shared with our SMS platform provider (solely to deliver messages on our behalf) and as required by law.


4. Cookies & Tracking Technologies

4.1 What We Use

We use cookies and similar technologies (e.g., pixels, local storage) to:

  • Keep you logged in across sessions (authentication cookies)
  • Remember your preferences and settings
  • Analyze how visitors use our Services
  • Deliver relevant content and improve performance

4.2 Types of Cookies

  • Essential Cookies: Required for the Services to function. These cannot be disabled.
  • Functional Cookies: Remember your preferences and customizations.
  • Analytics Cookies: Help us understand usage patterns (e.g., page visits, session duration).
  • Third-Party Cookies: Set by providers such as analytics tools; governed by their own privacy policies.

4.3 Your Choices

You can configure your browser to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect the functionality of certain features. You may also opt out of analytics tracking by adjusting your browser or device settings.


5. Data Security & Handling

5.1 Security Measures

We implement industry-standard technical and organizational safeguards to protect your information, including:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Role-based access controls limiting who can access your data
  • Row-level security policies in our database layer
  • Regular security reviews and vulnerability assessments
  • Secure third-party infrastructure (Supabase, AWS, Stripe)

5.2 Data Retention

We retain your personal information for as long as your account is active or as needed to provide Services. If you close your account, we will delete or anonymize your data within a commercially reasonable time, unless retention is required by law.

5.3 Limitations

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information using commercially reasonable means, we cannot guarantee absolute security.

5.4 Third-Party Processors

We work with vetted third-party service providers who process data on our behalf under contractual obligations to protect your information. Key providers include:

  • Supabase — database and authentication
  • AWS — cloud infrastructure and storage
  • Stripe — payment processing
  • Resend — transactional email delivery

6. Your Rights & Choices

Depending on your location, you may have the following rights with respect to your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete information.
  • Deletion: Request that we delete your personal data, subject to certain exceptions.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to certain uses of your data, including direct marketing.
  • Withdraw Consent: Withdraw any consent you have previously provided (e.g., SMS opt-in).

To exercise any of these rights, contact us at privacy@mistro.info. We will respond within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request.


7. Children’s Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.


8. Links to External Sites

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.


9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this page and, where appropriate, by email or in-app notification. Your continued use of our Services after any change constitutes your acceptance of the revised Policy.


10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Mistro, LLC Email: privacy@mistro.info Website: https://mistro.info