Privacy Policy

Roofstead plays two different roles with information. For our website and our own business records, we are the controller of the information we collect. For the information a roofing company and its team enter into the platform about their own leads, jobs, and customers ("Customer Data"), that roofing company is the controller and Roofstead acts as a processor — we handle that information on the company's behalf and under our agreement with them, not for our own purposes.

If you are a homeowner asking about information a roofing company holds about you, please contact the roofing company you worked with; we will support their handling of your request.

• Account and contact information — name, business name, email, phone, and role for people who sign up for or are added to Roofstead.
• Customer Data — the leads, jobs, estimates, photos, documents, and contact details a roofing company enters into the platform, which may include homeowners' names, addresses, phone numbers, email addresses, and property information.
• Payment information — processed by our payment provider; we do not store full payment card numbers.
• Usage and device information — how the Service is used, log data, IP address, browser and device type, and similar technical details, collected automatically.
• Cookies — our website uses cookies and similar technologies for basic functionality and to understand usage; you can control cookies through your browser settings.

We use information to provide, operate, secure, support, and improve the Service; to communicate with you about your account, updates, and support; to process payments; to comply with legal obligations; and to protect the rights, safety, and property of Roofstead and its users. We use aggregated or de-identified information — which does not identify you or any individual — to understand and improve the Service.

We do not sell your personal information. We share information with:

• service providers who help us run the Service (such as hosting, payment processing, email, mapping, and analytics), under contracts that limit their use of the information;
• the roofing company that controls the relevant Customer Data;
• authorities or others when required by law or to protect rights, safety, and property; and
• a successor entity in connection with a merger, acquisition, financing, or sale of assets, with notice where required.

A team member can choose to connect their own Google account to Roofstead. When they do, we ask Google for two permissions and use them only for the features the team member triggers:

• Send email on their behalf (Gmail scope gmail.send) — so estimates, invoices, signed copies, photo reports, and job notifications they send from Roofstead go out from their own Gmail address and replies land in their inbox. We do not read, list, search, or store their existing email.
• Create and manage calendar events (Google Calendar scope calendar.events) — so an appointment they schedule on a job is added to, updated on, or removed from their Google Calendar. We do not read other events on their calendar.

We store only the authorization token Google issues, so these features keep working. We do not sell Google user data, do not use it for advertising or to train artificial-intelligence models, and do not transfer it to anyone except as needed to provide these features or as required by law. Roofstead's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

A team member can disconnect Google at any time from My Account in Roofstead, or remove Roofstead's access from their Google Account's security settings; either one revokes our access, and we delete the stored token.

Where messaging is enabled, messages are sent only with the consent required by law, and recipients can opt out of marketing messages by replying STOP. We also send account and service messages related to your use of Roofstead.

We keep information for as long as needed to provide the Service and for legitimate business and legal purposes. Customer Data is retained according to our agreement with the controlling roofing company; after an account ends, we delete or de-identify it within a reasonable period unless we are required to keep it by law.

We use reasonable administrative, technical, and physical safeguards designed to protect information. No method of transmission over the Internet or method of storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

You can access and update your account information, or ask us to correct or delete it, by contacting us at info@roofstead.com. Depending on where you live, you may have additional rights — for example, under the California Consumer Privacy Act — to access, delete, or opt out of certain uses of your personal information. We honor these rights and will not discriminate against you for exercising them. For requests about Customer Data controlled by a roofing company, please direct them to that company.

Roofstead is a business tool that is not directed to children, and we do not knowingly collect personal information from anyone under 18 through the Service.

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, take reasonable steps to notify you.

Questions or requests about privacy? Email us at info@roofstead.com. Roofstead is a product of Roofstead LLC, Orion, Illinois.