Privacy Policy

1. Who We Are

RoofReporterAI ("we", "our", "us") is a roofing measurement and business management platform operated from Alberta, Canada. We provide AI-powered roof measurement reports, CRM tools, invoicing, and a voice AI receptionist service to roofing professionals. Our website is https://www.roofreporterai.com. For privacy inquiries, contact us at [email protected].

2. Information We Collect

• Account information: Name, email address, company name, and password (hashed — never stored in plaintext).
• Property addresses: Street addresses and GPS coordinates you submit to generate roof measurement reports.
• Payment information: Processed entirely by Square. We do not store full card numbers. We record transaction IDs and amounts for your billing history.
• Usage data: Pages visited, features used, and report generation history — used to improve the service.
• Google Gmail OAuth token: When you voluntarily connect your Gmail account (see Section 3), we store your OAuth refresh token. We never collect or store the contents of your emails or inbox.

3. Google Gmail Integration and the gmail.send Permission

RoofReporterAI offers an optional Gmail integration that allows you to send roof measurement reports, proposals, and invoices from your own Gmail address on your behalf.

• This integration is entirely optional. The platform works fully without it.
• You may revoke access at any time at myaccount.google.com/permissions.
• We do not use your Gmail token for any purpose other than sending emails you explicitly trigger within RoofReporterAI.

4. How We Use Your Information

• To generate and deliver roof measurement reports.
• To process payments and maintain billing records.
• To send transactional emails (report delivery, invoices, account notifications).
• To improve our AI models and measurement accuracy.
• To respond to support requests.

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

5. How We Store Your Data

Your data is stored in Cloudflare D1 (SQLite at the edge), protected by Cloudflare's infrastructure with encryption at rest and in transit. OAuth tokens are stored encrypted. Passwords are hashed using SHA-256 with a unique salt per user — we cannot recover your password.

6. Third-Party Services

• Square: Payment processing. Governed by Square's Privacy Policy.
• Google Solar API & Maps: Property imagery and geospatial data. Governed by Google's Privacy Policy.
• Google Gemini AI: AI vision analysis for roof condition. Property images may be processed by Google's AI infrastructure.
• Resend: Transactional email delivery (when Gmail integration is not used).
• LiveKit: Voice AI receptionist infrastructure.

7. Your Rights (PIPEDA — Canada)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent for data processing (subject to legal and contractual obligations).

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain records for legal or accounting purposes (typically 7 years for financial records under Canadian tax law).

9. Cookies

We use a single session cookie to keep you logged in. We use Google Analytics (GA4) to understand aggregate traffic patterns. No advertising cookies are used.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users by email of material changes. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests, contact:
RoofReporterAI
Alberta, Canada
[email protected]