Privacy policy

Information we process

Account email and sign-in information; company and representative contact details, licensing information and logos you provide; property addresses and coordinates; selected structures, Google-derived roof measurements, manual corrections, notes, report files, and usage records. Property information may identify homeowners or other individuals even when you use the service for business. Do not upload sensitive personal data that is unnecessary for roof measurement.

Sample report requests

When you request the sample report, we save your full name, phone number, and submission time in Lovable Cloud. Authorized administrators can review these requests and receive an email notification through Lovable’s email service. Phone numbers are not verified, and no confirmation email or text message is sent to you. Providing a phone number is not consent to automated marketing calls or texts. Contact us to request access, correction, or deletion.

Why we use it and who receives it

We process information to operate accounts, measure properties, produce reports, enforce allowances, provide support, prevent abuse, and administer billing. Lovable provides hosting, authentication, database and file storage for these activities. Google receives address queries and coordinates for address suggestions, maps, roof data, and requested report imagery; its map service also receives ordinary connection and device information. Google sign-in receives account authorization data when you choose it. Google Fonts receives connection information when fonts load. Stripe is the payment processor and receives payment and billing details directly; this app does not collect raw card numbers. Base subscription checkout is available through Stripe. Lovable’s email service processes recipient addresses and message contents for configured transactional messages. The optional saved anomaly-review function uses Lovable AI to process submitted roof measurements, if invoked; it is not part of the public landing page. See our service-provider list.

Cookie-free visitor analytics

For visitors in the EU/EEA, the UK, Switzerland, Canada, or a country that cannot be determined, clicks are recorded only after analytics is accepted. For everyone else, clicks may be recorded unless analytics is rejected. Global Privacy Control prevents click recording even after acceptance. Page visits, time on page, page speed, and errors are recorded for every visitor, without cookies and without identifying anyone.

Lovable’s analytics uses no cookies, stores nothing on your device, does not keep IP addresses, and does not identify visitors. It records pages visited, where visitors came from, country, browser, operating system, device type, time on site, page-load speed, errors, and permitted clicks. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable’s privacy policy explains how it handles it. The editor preview is not counted.

Other device storage and privacy choices

Sign-in uses browser storage to keep your session. A device identifier supports account-session security. Administrator customer-account entry uses temporary tab storage; authorized administrator entry is audited and limited to account administration and support. Privacy-choice storage saves your answer for up to 12 months (acceptance up to 365 days, refusal up to 183 days). This is separate from cookie-free visitor analytics. No advertising pixel or retargeting tag is currently installed. Google and other chosen providers have their own privacy practices.

Use the permanent Cookie settings link below to review or change your choice. Your browser’s Global Privacy Control keeps optional analytics off. Rejecting optional analytics does not disable necessary sign-in and security storage.

Retention and deletion

Current Google-result reuse is limited to 30 days. Thirty days is a maximum reuse window, not a guarantee that every saved field or backup is automatically deleted at that time. The intended customer report-file retention is up to three years, subject to provider licensing and legal requirements; report-file expiry and imagery licensing require further verification before launch. Account/project deletion, backup retention, and billing-record schedules must be finalized before commercial launch. We may retain records where required by law or necessary to resolve disputes, with access restricted to those purposes.

Requests and California rights

Contact info@rooftoolpro.com for access, correction, deletion, account closure, or questions. We may reasonably verify your identity and authority without requesting unnecessary sensitive information. If a roofer controls information about you, we may direct the request to that business or assist it. Applicable law may provide rights to know, access, correct, delete, opt out of sale or sharing, limit certain sensitive-data use, and receive non-discriminatory treatment. We do not currently sell personal information or share it for cross-context behavioral advertising. CCPA applicability depends on statutory thresholds and the business’s activities; B2B use alone is not an exemption.

Security and scope

Account permissions and protected administrator access restrict ordinary data access. We do not claim absolute security or a specific encryption-at-rest standard without verification. Initial commercial service is intended for US businesses and not children. International expansion requires a separate review of applicable privacy obligations, legal bases, contracts, and transfer safeguards. We will revise this policy when actual practices change.