Privacy Policy

• Account information: name, email address, phone number, role within Roof Wars LLC, and authentication credentials.
• Business records you enter or import: customer contact details, job and project data, estimates, invoices, payments, bills, vendor records, employee records, inventory, photos, and related operational data.
• Data from connected third-party services that you authorize us to access on your behalf: QuickBooks Online (accounting records), Stripe (payments and connected accounts), Plaid (bank account verification and transaction history, if enabled), Google Workspace and Microsoft 365 (calendar, contacts, mail, when connected), AcuLynx (CRM data, when connected), and similar integrations you enable.
• Device and usage data: IP address, browser type, operating system, pages viewed, actions taken, timestamps, and error logs. Used for security, fraud prevention, and to improve the Service.
• Location data: precise GPS coordinates only when explicitly attached to a field action (e.g., a tagged comment from a job site), and never collected silently in the background.

• To operate, maintain, and improve the Service.
• To authenticate users, prevent fraud, and secure accounts.
• To synchronize data with third-party services you have connected (for example, posting an invoice to QuickBooks Online when you ask us to).
• To send transactional notifications, system alerts, and support communications.
• To meet legal, tax, accounting, and audit obligations.

We do not sell personal information. We do not use customer business data to train external machine-learning models without your explicit consent.

We rely on the following sub-processors to deliver the Service. Each is contractually bound to protect the data we share.

• Supabase, Inc. — application database and storage
• Vercel, Inc. — application hosting and content delivery
• Google LLC — Gemini API for AI features; Maps, Workspace integrations
• Intuit Inc. — QuickBooks Online integration
• Stripe, Inc. — payment processing and Connect
• Plaid, Inc. — bank account connectivity (when enabled)
• Twilio SendGrid and Resend — transactional email delivery
• Microsoft Corporation — Outlook / Microsoft Graph integration (when enabled)
• Anthropic, PBC — Claude API (when enabled for AI features)

• All traffic to and from the Service is encrypted in transit using TLS 1.2 or higher.
• Sensitive integration credentials (OAuth tokens, API keys) are encrypted at rest using AES-256-GCM before being stored in the database.
• Access to production systems is restricted to authorized personnel and audit-logged.
• Financial records (journal entries, journal entry lines, and related accounting data) are written to append-only audit logs at the database level. The audit log cannot be modified or deleted by any application code.

We retain personal and business data for as long as your account is active and as long as we need it to provide the Service. Financial and tax-related records are retained for at least seven (7) years to meet U.S. Internal Revenue Service requirements. We may retain backups for a limited period after deletion as required for disaster recovery.

Depending on your jurisdiction, you may have the right to:

• Access the information we hold about you.
• Request correction of inaccurate information.
• Request deletion, subject to legal and audit retention requirements.
• Withdraw consent for processing that relies on consent.
• Disconnect any third-party integration at any time from the Service settings.

To exercise any of these rights, contact us at bwages@roofwars.com.

The Service is not directed to children under 13 and we do not knowingly collect data from them.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated to authorized users in advance where reasonably practicable.

This Privacy Policy is governed by the laws of Florida, USA, without regard to its conflict-of-law provisions.

Questions or requests about this Privacy Policy can be sent to bwages@roofwars.com.