Pre-launch draft · November 13, 2026
Data processing addendum
This is a proposed DPA outline for attorney review, not an executed agreement or a claim of GDPR readiness. A final agreement must identify the legal contracting owner and match verified operational controls.
Roles, purpose and scope
The roofing business generally determines why its customer/property data is used. RoofTool Pro processes that data on its documented instructions to host projects, retrieve authorized property information, generate reports, and provide support for the duration of the service. RoofTool Pro separately administers its own account, security, billing and legal records as described in the privacy policy. Data may include contractor and representative details, homeowner-related property addresses, coordinates, company logos, project notes, corrections and reports.
Customer instructions and confidentiality
The customer is responsible for a lawful basis, notices, permissions, and accuracy for submitted data. Processing instructions must be lawful and consistent with the service and provider licenses. Proposed obligations include limiting access to authorized personnel under confidentiality duties and using data only for documented service purposes or legal requirements. No training-use exclusion or encryption certification is asserted without verified provider terms.
Providers, security and assistance
The provider list identifies current services and planned payment processing. A final DPA must address provider authorization, change notices, equivalent contractual protections where applicable, verified security measures, incident notification without undue delay when legally required, assistance with rights requests, reasonable audit information, and responsibility for subprocessors. No unverified response-time or security guarantee is included.
End of service and international requests
Final terms must specify export formats, deletion/return instructions, backup exceptions and retention timelines. Initial commercial availability is US-only. International transfers and any required GDPR contractual clauses must be reviewed before offering service outside the US. Request the final DPA or raise a data-processing concern at info@rooftoolpro.com.