Privacy Policy

RoofGo LLC, organized in Mississippi, which operates RoofGo (“RoofGo”, “we”, “us”) provides software that roofing companies use to measure roofs, estimate, propose and follow up on roofing work. This policy explains what information RoofGo handles, why, who helps us process it, how long we keep it, and the choices you have. It covers the RoofGo website, the RoofGo app and homeowner proposal links.

Our two roles

• For account information (the roofing companies that sign up and the people on their teams), RoofGo decides how the information is used. In privacy law terms we are the controller or business.
• For homeowner information that roofing companies put into RoofGo, the roofing company decides how it is used and RoofGo processes it only on its behalf. We are its processor or service provider, under our Data Processing Addendum. If you are a homeowner, the roofing company that contacted you is the best place to start with a question or request; we will help them answer it, and we will pass on any request you send us.

What we collect

Account information

Your name, email address, password (stored only as a one-way hash), optional phone number and photo, your role, when you signed up and last signed in, and the IP address of sign-in attempts, which we use to stop password guessing.

Company information

Your company’s name, address, phone, license details, branding and logos, your Price Book, your team and their roles, your plan, your Property Credit usage and your billing history. Card details are taken by Stripe and never reach RoofGo.

Homeowner and property information

On behalf of roofing companies: property addresses, roof measurements, and, when a company adds them, homeowner names, email addresses, phone numbers, notes, door-knocking statuses, estimate prices and mailer status. When a homeowner opens a shared proposal we record that it was opened and which buttons were tapped (call, text, email, financing), without recording who they are.

Usage and analytics

Which features are used, recorded in our own database so we can improve RoofGo, and page view counts from Vercel Web Analytics. Short links count clicks, with the referring site and whether the visitor looked like a bot.

Error monitoring

When something breaks, Sentry receives the error and the page it happened on. Before a report leaves RoofGo we strip cookies, sign-in headers, request bodies, user details, IP address headers and the secret tokens in proposal and sign-in links.

Website visitors

If you use the contact form we receive your name, email and message. The free demo and the public storm check store a keyed one-way hash of your IP address, only to limit how often they can be used.

Cookies

• roofgo_session and roofgo_tenant: keep you signed in and remember which company you are working in.
• roofgo_pending: lets a sign-in link opened on your phone sign in the browser that asked for it (30 minutes).
• roofgo_demo: remembers your free demo session.
• roofgo_attr: remembers how you first found us (for example, which campaign link), so we know which marketing works.

We do not use advertising cookies and we do not track you across other websites. Because of that, we treat browser “Do Not Track” and Global Privacy Control signals the same way we treat every visitor: there is no cross-site tracking or sale of data to opt out of.

How we use information

• To provide RoofGo: measurements, estimates, proposals, sharing, mail and storm maps.
• To bill for it and keep an auditable record of usage.
• To keep it secure, prevent abuse and fix problems.
• To answer support requests and send account notices.
• To understand, in aggregate, which features are used.
• To create de-identified, aggregated data, such as roof sizes, materials, prices and storm outcomes by area, that cannot identify a homeowner, a person or a company. We may use it for any lawful purpose, including products and reports we offer to others.
• To meet legal obligations.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We never use one company’s homeowner information for another company, or for RoofGo’s own marketing. We do not use customer data to train AI models.

De-identified data is not personal information. We keep it in a form that cannot reasonably be linked back to a person or household, we will not try to re-identify it, and anyone we share it with must agree not to either.

Who processes information for us

We share information only with the service providers that run RoofGo, each receiving only what it needs for its part, over encrypted connections:

• Google Maps Platform: Addresses and map locations, and the address text you type into search, to show maps and satellite imagery, find addresses and measure roofs.
• Stripe: Billing name, email, address and payment details, to take payments. Card numbers go straight to Stripe and never reach RoofGo.
• Resend: Recipient addresses and message content, to deliver sign-in links, account notices and the estimates a roofing company emails to a homeowner.
• Vercel: Hosting for the RoofGo website and app, which means every request passes through it, and Vercel Web Analytics for page view counts.
• Neon: The database where account, company and homeowner records are stored.
• Sentry: Error reports from the app. Cookies, sign-in headers, request bodies, user details, IP address headers and secret link tokens are removed before a report is sent.
• Anthropic: Only for companies that use the AI add-on: the property facts a rep asks it to work from (such as the address, homeowner name, door history, notes and estimate figures), to draft a follow-up or note.

Google’s handling of the information it receives is described in the Google Privacy Policy.

RoofGo also reads public weather data (NOAA, the National Weather Service, and Iowa State University’s archive of NWS warnings). To look up the warnings that covered a property, the map location of that property is sent to Iowa State University, without any name or contact details.

We may also disclose information when the law requires it, to protect the rights or safety of RoofGo, our customers or others, or to a buyer if RoofGo’s business is sold, in which case this policy continues to apply.

How long we keep information

• Account and company information: while the account is open, then deleted as described below.
• Homeowner information: for as long as the roofing company keeps it in RoofGo. When the company deletes a record, or its account, it is deleted.
• Map data from Google: some of it, such as map coordinates and certain roof data, may only be stored for a limited time under Google’s terms (for some data, no more than 30 days). We delete or refresh it on that schedule.
• De-identified, aggregated data: kept indefinitely, including after an account is deleted, since it cannot identify anyone.
• Database backups: up to 30 days, after which they are overwritten.
• Billing records: as long as tax and accounting law requires. Stripe also keeps its own records of payments it processed.
• Security records (sign-in attempts and the audit log of account changes): while the account is open, except the record that an account was deleted.

Deleting an account

Anyone can delete their own login from Account in the app, and the company owner can delete the whole company account there too. A deleted company’s data is removed from our live database within 30 days, and from backups within 30 days after that. See Deleting your account, which also explains how to ask by email.

Security

• All traffic to RoofGo is encrypted in transit with HTTPS.
• Passwords are stored only as salted one-way hashes.
• Every company’s data is kept separate, and each person sees only what their role allows.
• Changes to access, billing and settings are recorded in an audit log.
• Access to production systems is limited to the RoofGo staff who need it to run and support the service.

No system is perfectly secure. If a breach affects your information we will tell you as the law requires. More detail is on our Security page.

United States only

RoofGo is offered only to businesses in the United States and is not directed to people outside it. Information is processed in the United States and wherever our service providers operate.

Children

RoofGo is a business service for adults. It is not directed to children, and we do not knowingly collect information from anyone under 18.

Your rights and requests

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of its sale or use for targeted advertising (we do neither). People on a RoofGo account can see, correct, export and delete most of their information in the app. For anything else, email support@roofgo.co. We will confirm the request comes from you (or someone you have authorized) before acting on it, and we will not treat you differently for making it. If we turn a request down, you can reply to ask us to reconsider.

Homeowners: your details were added by a roofing company. Ask that company first. If you write to us, we will forward your request to the company and help it respond.

Changes to this policy

We will post any change here and update the date at the top. If a change is material, we will also email account owners before it takes effect.

Contact