Privacy Policy

1. Who this policy covers, and who decides what happens to your information

If you have a RoofStruct account, we decide what is collected about you and why — your account details, your billing, how you use the platform, your support conversations, and error diagnostics. US state privacy laws would call us the business for that information, and UK and EU law would call us the controller. If a contractor entered or sent your information through RoofStruct — you are one of their customers, you received an estimate, or you are a supplier they order from — then the contractor decides what to collect about you and why, and we hold and handle it so we can run the platform for them. There is an honest exception to that split: for some things we act on our own account even with information a contractor entered. That covers the internal operational alerts we send to our own staff, fraud and abuse monitoring, product analytics, and our staff producing by hand a report a contractor ordered. We do not sell personal information and we do not use it for advertising.

If a contractor entered your information and you want it changed or removed, contact that contractor first — they decide what is held about you and for how long. You can also write to us at . We will act on what we can and pass the rest to the contractor. Section 2 (If a contractor put your information into RoofStruct) is written for you.

2. If a contractor put your information into RoofStruct

This section is for you if you received an estimate or proposal generated by RoofStruct, a contractor lists you as a customer, you are a supplier who received a material order, or a contractor looked up your property. Your information reached us because a contractor entered or sent it — not because you gave it to us.

• Customer records. A contractor's record about you typically holds your name, email address, phone number, property address, and a history of work quoted or done. The contractor decides what to keep and for how long.
• How estimates and proposals reach you. They are delivered as a web page at a unique, unlisted address. The address contains a long random string and is not listed or indexed, but the page requires no sign-in and is not password-protected: anyone who has the link can open it. Whether the link expires is the contractor's choice, and if they set nothing it stays live. Treat the link like the document itself.
• What that page shows. The recipient's name, the full property address, the pricing, the contractor's business address, phone number and licence details, and — after signing — the signature record.
• Signing. Signing means typing your name. We store the name you typed, the time your browser reported, your browser's user-agent string, and the time our server recorded it. That record is returned to anyone who opens the link.
• Email. Estimate, proposal and reminder emails are delivered by our email provider, which records when a message is opened and when a link in it is clicked — using a small embedded image and redirect links — so the contractor can tell whether it arrived. Separately, when the estimate page itself is opened we record the date it was first opened and nothing else: no IP address, no device information, no location, and no per-view counter.
• Suppliers. Material purchase orders are emailed to the supplier the contractor chose, and contain the contractor's details, the delivery address and the materials ordered.
• Property imagery. When a contractor looks up an address, that address is sent to our imagery and geocoding providers. A property can be measured from aerial imagery without its owner ever using RoofStruct.
• What you can ask us for. Contact the contractor first, since they decide what is held about you. You can also write to : we will deactivate an estimate or share link on request, and we will pass access, correction and deletion requests to the contractor.

3. What we collect

In summary: your account and billing details, the projects and measurements you create, the customer records you enter, how you use the platform, error diagnostics when something breaks, support conversations, and messages sent through our contact form.

Here is each category, and what it is for.

Account information. Your name, email address, company name, and (optional) phone number. If you sign in through Google or Microsoft, we receive your name, email, and an OAuth subject ID — that's it.

Project data. The addresses you look up, roof geometry and measurements, material calculations, estimates and proposals, any photos you upload, and the customer records you create. Section 2 describes what this means for the people in those records.

Usage data. Pages visited, features used, session duration, browser and device type, and an approximate location derived from your IP address. Section 6 sets out exactly what Google receives and how to block it.

How you found us. The campaign labels and click identifier on the link that first brought you to RoofStruct, the page you landed on, the site that referred you, the kind of device, and the time. Kept in your browser for 30 days, saved to your account when you sign up, and copied onto the orders you place, so we can tell which ads and links bring customers. The Cookie Policy has the detail.

Contact-form messages. When you send us a message through the contact form we record the IP address it came from, the topic you chose, and your email address — the IP address for abuse prevention and rate limiting. We record that row even when our automated bot filter rejects the submission. The message text itself is forwarded to us by email rather than stored in that log, and the forwarded email includes the IP address.

Support conversations. Support tickets, the messages in them, and any files you attach. When you open a ticket, a notification containing the subject and the opening of your message goes to our internal alerting tools so a person sees it.

Preferences. Your language, unit system, dark or light mode, and similar interface settings. Almost all of these live in your browser's local storage rather than in a cookie — the language preference is the one exception. The Cookie Policy has the full inventory.

What we don't ask for. We never ask for Social Security numbers or health information, and we never see card numbers — Lemon Squeezy handles payment and card details go directly to them. RoofStruct is a business tool for roofing professionals and is not intended for anyone under 18; see Section 15 (Children's privacy).

4. Who receives your information

We do not sell personal information. The categories of provider below receive personal information either from us or directly from your browser, for the purposes described. Most run under the provider's standard terms and data-processing terms. We describe them by category rather than by name, and we change providers from time to time. If you need the specific providers — for a vendor review, a data-processing agreement, or a request about your own information — email us and we will identify them.

Hosting and infrastructure. Our database, authentication, file storage, serverless backend, website hosting and content delivery run on third-party infrastructure providers in the United States. This is where your account, projects, customer records and uploads live. Standard server access logs (IP address, user agent, request path) are kept briefly for security and reliability.

Payments. Lemon Squeezy is our merchant of record for every purchase: subscriptions, Ordered Reports and credit packs. They process payments, calculate and collect sales tax and VAT, issue receipts, and manage refunds and chargebacks. They receive your name, billing address, email, and what you are buying. Your card details go directly to them — we never see or store card numbers. Their handling of your data is governed by their privacy policy.

Email delivery. A third-party email provider delivers our transactional email: welcome emails, receipts, order confirmations, estimates and proposals, reminders, purchase orders, password resets and similar. It records when our emails are opened and when links in them are clicked. Some of these emails go to people who have no RoofStruct account, such as a contractor's customer or supplier. We don't send marketing email today; if that changes, we'll ask for your consent first and every message will carry an unsubscribe link.

Analytics. We use Google Analytics 4. Google receives your IP address, the pages you visit, and — once you are signed in — an identifier for your RoofStruct account and page addresses that can contain internal record identifiers. Ad storage, ad user data and ad personalisation are all set to denied on our property. Section 6 has the detail and the ways to block it. Your browser contacts Google directly.

Sign-in providers. If you choose to sign in with Google or Microsoft, we receive your name, email, and an OAuth subject ID from them. We never see your Google or Microsoft password.

Aerial imagery and mapping. Third-party imagery and mapping providers supply the aerial and satellite views in the editor and the geocoding that turns an address into a location. When you look up an address, that address is sent to the provider to find the property and retrieve the imagery.

AI image processing. Optional image enhancement sends the image to third-party generative-AI providers in the United States. Only the image and a fixed instruction are sent: no address, and no account, project or user identifier. We do not currently set a no-training or data-retention flag on these requests, and each provider's own terms govern how they handle the image.

Internal communication and alerting. Operational alerts go to the internal tools our team uses, so a person notices things that need attention. These alerts contain: your name and email when an account is created; your name, email, the full property address and the price when a paid report is ordered; and the subject and the opening of your message when you open a support ticket.

Bot detection. Where enabled, a third-party bot-detection service checks our public forms for automated submissions and receives your IP address.

5. Why we handle your information

Several privacy laws require us to explain why we handle information, and some require us to name a legal basis for each purpose. Where a specific law requires one, here is what we would identify:

To perform the contract — running the service you signed up for: storing your projects, generating reports, sending transactional emails, processing your subscription.

Legitimate interests — debugging, security monitoring, fraud and abuse prevention, and operating and improving the service.

Your consent — where we rely on it. If we ever send marketing email we will ask for consent separately, and you can withdraw it at any time. To be clear about what we do not do: we do not currently ask for consent before analytics loads. Section 6 explains exactly what that means.

Legal obligation — tax records, billing records, and anything else the law requires us to keep. Most of this lives with Lemon Squeezy as merchant of record.

Where a law treats consent as the starting point rather than requiring us to name a basis, Sections 5 and 6 together describe what we actually do. We are not claiming an exemption.

6. Analytics, cookies, and tracking

Google Analytics 4 loads on every page as soon as you arrive, before you interact with the site, for every visitor. Outside the United States a short notice on your first visit tells you so; in the United States no notice is shown. Either way there is no consent gate: analytics is already running when you arrive. Google receives your IP address, from which it derives an approximate location; the pages you visit; and, once you are signed in, a stable identifier for your RoofStruct account together with page addresses that can contain internal identifiers for your workspace, projects, orders and estimates. Those are internal record identifiers, not your customers' names or contact details. Ad storage, ad user data and ad personalisation are all set to denied on our Google Analytics property, and we do not use Google Analytics for advertising, retargeting or audience building. Advertising is a separate purpose with its own tag, described just below.

You can turn analytics off at any time from the Cookie Preferences link in our site footer, or from the first-visit notice where one is shown. Turning it off stops analytics for that browser and deletes the analytics cookies already stored there. We also honour Global Privacy Control: if your browser sends a GPC signal we treat it as an opt-out before analytics loads at all, so no tag, no cookie and no request to Google. Blocking cookies or using a tracker-blocking extension works too. The full inventory is in our Cookie Policy.

One honest note for readers in the EEA and the UK: a dismissible notice with an opt-out is not the prior opt-in those rules apply to analytics cookies, and we are not claiming otherwise. The opt-out above is real and takes effect immediately; the consent gate is not something we have built.

Advertising is separate from analytics. We advertise on Facebook and Instagram, and on Google Search. Our Google ads load no advertising tag, pixel or cookie on this site. We measure our Facebook and Instagram ads with the Meta Pixel and Meta's Conversions API. Where advertising is on for your browser, a Meta script loads on our pages, sets the cookies _fbp and _fbc, and Meta receives the pages you view, the fact that you created an account or paid for an order, and identifiers we hash before they leave our servers. The same events are sent from our servers with a shared event identifier so one conversion is not counted twice. In the United States this is on by default, no notice is shown, and the switch behind the Cookie Preferences link in our site footer turns it off; in Canada, Québec, the EEA, the UK and everywhere else it stays off until you turn it on; and Global Privacy Control forces it off in every case. Our Cookie Policy has the full inventory.

7. Automated processing and AI features

RoofStruct offers an optional image-enhancement feature. When a contractor uses it, the aerial image is sent to a third-party generative-AI provider in the United States to produce a clearer version. Only the image and a fixed instruction are sent — no address, and no account, project or user identifier.

We do not currently set a no-training or data-retention flag on those requests, and each provider's own terms govern how they handle the image.

The enhanced image is a machine-generated rendering intended to make the roof easier to see. It is not a photographic record of the property and should not be relied on as one.

Waste factors and material calculations are produced by a fixed set of rules, not a machine-learning model, and are calculated inside RoofStruct. Nothing is sent to an AI provider for them.

In the features described in this policy, we do not make decisions about you by automated means alone that produce legal or similarly significant effects, and we do not carry out profiling.

8. How long we keep it

We keep your account and the projects in it for as long as your account is open. We do not currently run an automated deletion schedule. If you ask us to delete your account and its data, we do it by hand after confirming the request, and we keep only what we are legally required to keep.

Billing and tax records are held by Lemon Squeezy as merchant of record for the period its obligations require — around seven years. Database backups are managed by our infrastructure provider on its standard retention schedule for our plan.

Three categories worth stating separately. Support tickets, their messages and any attachments are kept for as long as we may need them to reopen or evidence the conversation, and there is no self-service way to delete an attachment today. Contact-form records, including the sender's IP address, are kept for abuse prevention and rate limiting — including submissions our bot filter rejected. Analytics data is retained on Google's schedule for the property.

When you delete a project, we keep a small non-identifying record of it for product analytics: when it was created and deleted, how many facets it had, its roof area, and whether the imagery came from satellite or your own upload. That record contains no address, no project or customer name, no claim details, no coordinates and no drawing — we keep it to understand how the product is used, not to keep your work. It is visible only to our staff, and we keep it indefinitely unless you ask us to erase it.

9. How we protect your information

Data is encrypted in transit using TLS 1.2 or higher, and encrypted at rest by our hosting provider. Each workspace's data is separated at the database level, so one account cannot read another's.

One thing worth telling you plainly: RoofStruct staff with an administrative role can read customer records across accounts. We use that to provide support, investigate abuse, and produce by hand the reports contractors order. Changes staff make through our internal tools are recorded in an audit log; reads are not currently logged.

No system is perfectly secure. If we become aware of an incident affecting your personal information, we will take reasonable steps to reduce the risk of harm and, where the incident presents a risk of serious injury, notify you and the applicable regulator — for individuals in Quebec the Commission d'accès à l'information du Québec, for other individuals in Canada the Office of the Privacy Commissioner of Canada, and otherwise as the law requires.

10. Your choices, and how to use them

Wherever you live, you can ask us to do the following. The regional sections below explain how each law applies.

Access your data. Most account and project data is visible in the dashboard. For anything that is not — support conversations, error diagnostics, contact-form records, analytics identifiers — email and we will send it to you. The in-product exports on their own are not a complete copy of your data.

Correct anything that is wrong, either in Settings or by emailing us.

Delete your account and its data. There is no self-service delete control today — email and we handle the request by hand. We confirm the request, delete the account and its project data, and keep only what we are legally required to keep. Billing records stay with Lemon Squeezy as merchant of record.

Export your data. The in-product export tools cover your projects and reports: PDF export is available on every plan, and CSV, XLSX and DXF are paid-plan features. So that a portability request never depends on your plan, email and we will send a copy of your data in a portable format, free of charge, on any plan.

Object to processing based on legitimate interests, or withdraw any consent you have given.

Confirming who you are. To protect your information we may ask for enough detail to confirm your identity before we act, and we will normally need the request to come from the email address on the account.

How long we take. We respond without undue delay and in any event within one month of receiving your request. If it is complex, or you have made several, we may extend by up to two further months and will tell you within the first month. Where Quebec law applies, we respond in writing within 30 days.

11. Where your information goes

RoofStruct is a US company and all of our infrastructure is in the United States. If you use the platform from outside the US, your information is transferred to and processed in the US, where it may be accessible to US authorities under US law. Every service listed in Section 4 is either based in the US or reached from the US.

Where a provider offers the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum as part of its standard data-processing terms, we rely on those terms. We have not separately negotiated transfer agreements with them. If you want to see the safeguards a particular provider offers, email and we will point you to their published terms.

12. If you're in the United States

Under California's privacy law and the comparable laws of other US states, you can ask to know the categories of personal information we collect and why, to receive a copy, to have it corrected, to have it deleted, and to opt out of sale, sharing and targeted advertising. Requests go to . We accept requests from an authorised agent, subject to verifying their authorisation. We do not offer financial incentives for personal information. We do not collect sensitive personal information as those laws define it, and we do not knowingly sell or share the personal information of anyone under 16.

On selling and sharing, here is the honest answer. We do not sell personal information for money. We do advertise: the Meta Pixel and Meta's Conversions API send Meta the pages you view on our site, your account sign-up and your paid orders, along with identifiers we hash first, and Meta may use that to show you our ads again. Several US state laws call that a “share” for cross-context behavioural advertising, and some treat the identifier our analytics sends Google the same way. We are not arguing about the label — the opt-out those laws require is one click away, below and in our site footer. For visitors we treat as being in the United States we also set Meta's Limited Data Use flag, which asks Meta to handle the event under the restricted regime.

What you can do about it today. Advertising has its own switch behind the Cookie Preferences link in our site footer, and the button below turns it off in one click for this browser. We do not show visitors in the United States a first-visit notice, so those two places are where the choice lives. Analytics has its own control in the same places. We detect and honour Global Privacy Control, which forces advertising off whatever is stored here; we do not act on Do Not Track, which GPC has effectively replaced. Your choices live in this browser only, so set them again on another device.

13. If you're in Quebec or elsewhere in Canada

The person in charge of the protection of personal information at RoofStruct is the person exercising the highest authority in the enterprise — our Chief Executive Officer. You can reach them at , or by mail at the address at the end of this policy.

Communication outside Quebec: your personal information is communicated outside Quebec and outside Canada. It is stored and processed in the United States, where it may be accessible to US authorities under US law.

Your rights include access to your personal information, rectification, withdrawal of consent, and portability in a structured, commonly used technological format. We respond in writing within 30 days. Portability is available free of charge by email on any plan, as described in Section 10.

Cessation of dissemination and de-indexation: you can ask us to stop disseminating information about you, or to deactivate an estimate or share link. Write to and we will deactivate it by hand.

Automated decisions: we do not make decisions about you based exclusively on automated processing. Our waste-factor recommendation is a rule-based calculation about a roof, not a decision about a person, and our image-enhancement feature edits an image and makes no decision about anyone.

If you are not satisfied with how we have handled your information, you can complain to the Commission d'accès à l'information du Québec. Elsewhere in Canada, you can complain to the Office of the Privacy Commissioner of Canada.

14. If you're in the UK, the EEA, or Switzerland

In addition to the choices in Section 10, you have these rights:

Right of rectification — to fix inaccurate or incomplete data.

Right to erasure (“right to be forgotten”) — to have us delete your data, subject to our legal retention obligations.

Right to restriction of processing — to ask us to stop processing while a dispute is resolved.

Right to data portability — to receive your data in a structured, machine-readable format.

Right to object — to processing based on legitimate interests.

Right to withdraw consent at any time, without affecting the lawfulness of processing that happened before withdrawal.

Right to lodge a complaint. In the UK, with the Information Commissioner's Office (Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF). In the EEA, with the supervisory authority in the country where you live or work.

About our presence in Europe: RoofStruct LLC is established in the United States and has no office, staff or establishment in the EEA or the UK. We do not currently market or target the RoofStruct service to customers in those regions, and we have not appointed a representative under Article 27 of the EU or UK GDPR. Before we begin offering the service there, we will appoint one and update this policy. If you are in the EEA or the UK and use RoofStruct, the rights in this section are available to you.

If your organisation needs written data-processing terms, they already apply to your account: they form part of our Terms of Service, in the section on personal information you put into RoofStruct. There is no separate document to request.

15. Children's privacy

RoofStruct is for roofing professionals and is not directed to anyone under 18. We don't knowingly collect data from minors. If you believe a minor has created an account, email and we'll delete it.

16. Changes to this policy

We may update this policy from time to time. The current version will always live at this URL, with a refreshed “Last Updated” date at the top. For material changes that affect account holders, we'll also give notice by email or in the dashboard before the change takes effect. That notice reaches people who have an account — we have no channel to homeowners or suppliers, so if a contractor sent you a document through RoofStruct, please check this page rather than expecting to hear from us.

17. Contact us

Privacy questions, and requests for access, correction, deletion, portability, link deactivation or data-processing terms, all go to . That address reaches the person in charge of the protection of personal information described at the top of this page. You do not need a RoofStruct account to use it — if a contractor sent you an estimate or listed you as a customer, or you are a supplier who received an order, write to us at the same address. Postal: RoofStruct LLC, 2803 Philadelphia Pike, Suite B #1640, Claymont, DE 19703, USA.