Ikena Permit
Privacy & data

What we do with your plans.

You are uploading client plan sets. We take that seriously. This page explains exactly what happens to your files, who sees them, and how long we keep them.

What you upload

When you submit a plan set for pre-check, the PDF is transmitted over an encrypted connection (TLS 1.3) to our servers hosted on Vultr in the United States. The file is stored temporarily for the duration of your pre-check analysis and your access period.

We do not share your plan set with any third party except the AI model provider (Anthropic) for the purpose of running the compliance analysis. Anthropic processes the image pages of your PDF to extract attributes and identify potential code issues. Anthropic's data handling policy is available at anthropic.com/legal/privacy. Per Anthropic's API terms, your submitted data is not used to train their models.

Reports and analysis results

Your compliance report — the list of flags, citations, and recommended fixes — is stored in our database linked to your Hawaii license number and the scan ID shown in the report URL. This allows you to retrieve your report at any time via /my-scans.

If you are on a firm seat, flags from your completed scans are indexed into your firm's precedent library. Only your firm can access this library.

Retention

Plan set PDFs and extracted page images are retained for 90 days after your report is generated, then permanently deleted. Report data (flags, citations, scan metadata) is retained for 12 months to support your ability to look up past work.

To request early deletion of your data, email [email protected] with your license number and scan IDs. We will delete within 5 business days.

Who sees your data

  • You — full access to your reports via your scan ID or email.
  • Your firm (if on a firm seat) — the admin and members you have added can access shared precedent data. Individual scan reports are not shared within the firm automatically; they require the scan URL.
  • Ikena Permit operators — for support, billing, and abuse prevention. We access individual scan data only when required to resolve a support issue, and only with your implicit consent by contacting us.
  • DPP or any AHJ — we never contact any permitting authority, share any data with them, or file anything on your behalf. Ever.
  • Third-party advertisers or data brokers — we do not sell or share personal information or project data for marketing purposes.

Personal information

We collect your name, email address, and Hawaii professional license number when you apply for early access. This is used to verify your license against the State DCCA roster, send you your upload link and report notification, and (on firm seats) manage your account. We do not collect payment card data directly — Stripe handles all payment processing.

Cookies and analytics

Ikena Permit uses minimal analytics (Google Analytics 4) to understand aggregate traffic patterns. No behavioral tracking, no retargeting pixels, no fingerprinting. No personally identifiable information is sent to GA4.

Questions

Email [email protected]. We respond within one business day. Ikena Permit is a DBA of Ikena Design & Build LLC, Honolulu, HI.

Last updated May 2026.