Privacy

Roofpeace stores the data your team enters about service areas, buildings, and outreach activity to deliver the storm-strike workflow. We never sell customer data.

What we store

• Account email, name, and role.
• Service-area boundaries and the buildings ingested inside them.
• CRM activity: assignments, statuses, notes, tasks.
• Public property and weather records used to provide the service.
• Usage and analytics events that help us understand product reliability and feature adoption.
• Public roof-report searches, returned report snapshots and actions such as reporting a wrong building. First-party browser and session identifiers help us connect these journeys; they do not tell us your name. These records are available only to platform administrators, shown for up to 90 days, and older records are pruned as reports are requested. These database records are not shared with roofers or exported to third-party analytics.
• If you optionally request an emailed report, we store the address you supply with that report request and use our email provider to send it. This does not create an account or marketing subscription. Signing in can associate this browser’s journey with your account.
• Questions you ask Shingles, the assistant, and its answers.
• Email addresses left on coverage and demo forms, used to contact you about Roofpeace.

Property records and homeowners

Roofpeace builds its property map from public records: county parcel and assessor data, building footprints, permits and storm reports. Where a county publishes them, these records include an owner's name and mailing address. Owner details are shown only to signed-in contractor workspaces. Free public reports show roof and storm signals, never owner details. We do not sell or rent this information to data brokers or advertisers.

If you own a property and want its owner details removed from Roofpeace, email privacy@roofpeace.com with the address and we will remove them.

Mobile app

• Location, only while you use the app and only if you allow it. It is sent with a request to order route stops, find nearby records or answer a question, and is not stored unless you save it to a record such as a new lead.
• Microphone and speech recognition, only while you hold to talk. Apple's speech recognition turns your words into text on your device or Apple's servers; Roofpeace receives the text, not the audio.
• A push notification token, to send you new-lead and job alerts.

AI features

Shingles and outreach drafts are generated by DeepSeek's API. To answer, we send your question, the workspace records it needs (which can include property addresses and owner names) and, from the app, your location if you shared it. Shingles proposes changes; nothing is saved until you confirm.

Analytics

We use PostHog to understand traffic, feature usage, and reliability. It may record anonymized session replays and heatmaps, with input fields masked by default. It helps us improve Roofpeace and does not allow us to sell customer data. Roofpeace sets cookies to keep you signed in; PostHog sets its own analytics cookies.

Subprocessors

These companies process data on our behalf:

• Hetzner: servers and database hosting.
• Bunny.net: job file and photo storage.
• Resend: email delivery.
• Stripe: payments and billing.
• DeepSeek: AI answers and drafts.
• Google: maps, address lookup and Google sign-in.
• PostHog: product analytics.
• Bugsink: error monitoring.
• Expo and Apple: mobile push notifications.
• Intuit QuickBooks and EagleView, only when your workspace connects them.

Addresses typed into lookups may also be sent to the US Census Geocoder and OpenStreetMap Nominatim to find their location.

Retention and requests

We retain workspace data while an account is active and as needed for security, billing, dispute resolution, and legal obligations. Workspace owners can request access, correction, export, or deletion by contacting us. We may retain limited records where required by law or necessary to protect the service.

Security

Access to product data requires an authenticated session and is scoped by workspace membership and role. Read more about our current practices on the security and data-handling page.

Contact

Privacy questions go to privacy@roofpeace.com.