Privacy Policy

This notice explains what Fractal SAAS Inc., carrying on business as FirePermit.Online (“we”, “us”), does with personal information when you use our websites and applications.

The short version: we collect what a fire department needs in order to issue you a burn permit and reach you if they declare a ban, we give that information to your municipality because that is the entire purpose, and we do not sell it to anyone.

There are two organisations involved, and it is worth being clear about which does what.

If you want a permit record corrected or removed from your department’s files, they decide that. We will help you reach them.

When you apply for or hold a permit:

When you use the site:

We do not collect your card number. Card details go directly to Stripe; we receive only the outcome of the payment and a reference.

We do not track your device’s location in the background. A map coordinate is stored only when you place a pin yourself, or when staff record one for you.

We collect it to provide the service you asked for: to let your fire department assess and issue a permit, to take payment where a fee applies, to give you a record of your permits, and to let the department contact you about them.

For most of this, the basis is your consent, given when you apply, together with the department’s need to administer permits under its by-law. Some information we keep because the law requires it — payment records, for example.

The phone number deserves a specific explanation. It is collected so the department can reach you quickly if a burn ban is declared while your permit is active. That is a safety purpose, and it is why a permit generally cannot be issued without a number the department can reach.

Canada’s Anti-Spam Legislation governs the commercial electronic messages we send. Here is how we treat messages:

You can withdraw consent at any time by replying STOP to a text, using the unsubscribe link in an email, or writing to info@firepermit.online.

Withdrawing consent to safety messages has a real consequence: your department may no longer be able to reach you during a ban, and depending on your by-law that may mean they cannot keep issuing you a permit. We will tell you if that is the case rather than quietly stop.

If you subscribe to ban alerts for a municipality without holding a permit, that subscription is consent for that purpose only. The list belongs to the municipality, it is exportable by them, and we do not use it for anything else.

Your municipality and its fire department. This is the point of the service, not an incidental disclosure. Staff can see your permit, your contact details, your address and your burn location.

Service providers who help us operate, each limited to what they need:

We may also disclose information where the law requires it, or to establish or defend a legal claim.

We do not sell personal information, and we do not share it with advertisers.

Your permit records and your account are stored in Canada, in Google Cloud’s Montréal region.

Three of the providers listed above process information outside Canada, in the United States, and only the part each of them needs: Stripe processes your payment, Twilio sends your text messages, and Resend sends your email. Your permit record as a whole does not leave the country.

This distinction matters because information held in another country may be accessible to that country’s courts and law enforcement under its own laws. We use providers that commit to appropriate protection, but we cannot exempt them from the law where they operate — which is why the Canadian storage above is worth being specific about rather than describing everything as “the cloud”.

Permit records are kept while your permit is active and afterwards as part of your department’s permit history, because a department needs to know what it has issued. How long the department keeps its own records is their retention policy, not ours.

Your account is kept while it is in use. If you ask us to close it, we remove the account and its sign-in details, subject to what we must keep — payment records and the permit history that belongs to the municipality.

Consent records are kept as long as the permit they relate to, because their whole value is being able to show what was agreed and when.

You may ask us to:

Write to info@firepermit.online. We will respond within 30 days, and we will not charge you for a reasonable request.

For information your municipality holds — which includes your permit — the request goes to them, and their access and correction process applies.

If you are not satisfied with how we have handled your information you can complain to the Office of the Privacy Commissioner of Canada: 30 Victoria Street, Gatineau, Quebec K1A 1H3, 1-800-282-1376, priv.gc.ca.

Information is encrypted in transit. Access to department data is restricted to that department’s own staff, and administrative access requires an account with an explicit role. Card details never reach our systems.

No system is completely secure. If a breach occurs that creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner as the law requires.

The service is not intended for children. Permits are held by adults responsible for a property. If you believe a child has given us personal information, write to us and we will remove it.

We use cookies that are necessary to run the service — keeping you signed in, and keeping the site secure. We do not use advertising cookies or third-party tracking.

We may update this notice. If a change is material we will give notice in the service or by email before it takes effect, and the date below will change.

Privacy questions: info@firepermit.online. Fractal SAAS Inc., 64 Hurontario St, Suite 200, Collingwood, Ontario L9Y 2L6, Canada.