Privacy Policy

Last updated October 24, 2026

The short version: when you ask us for a free roof estimate, we send your request to one independent local roofing company, which pays us for the introduction, and to nobody else. We collect what we need to run the service and measure our ads. We never store visitors' raw IP addresses and we never see your card number.

Information from homeowners

When you ask for a free roof estimate, in the form or in our chat, we collect what you tell us: your name, mobile number, email (optional), street address or ZIP code, and details about your roof and the job. In the chat we keep the conversation so the roofer gets the full picture. We also record how you reached us: the campaign tags and ad click identifiers on the link (for example utm tags, gclid or fbclid), the page you came from, your browser type, and a one-way hash of your IP address as a record of your agreement to be contacted.

The question where you give your phone number, and your answer, are kept as the record that you agreed to be called or texted about your estimate, as described in our Terms.

We send your request to one independent roofing company that serves your area, so that it can call or text you about your estimate. That roofer pays us for the introduction. We do not send your request to any other business and we do not sell it to data brokers or list sellers. Before the roofer unlocks your request, it sees only the job and the general area, never your name or contact details.

The roofer is an independent business, not part of Roofing.company. Once it has your request, its own privacy practices apply to how it uses your details. You can ask us at any time not to be contacted again, using the "Do not contact me" link on our pages, by replying STOP to a text, or by emailing [email protected].

Messages you send us

When you use our contact form we keep your name, email, phone (if given) and message so we can answer you. When you text our number, (863) 356-1042, we keep the messages and your phone number.

Information from roofers who buy leads

Your email, company name, contact name, phone, website, the ZIP code and radius of your service area, and any license and insurance details you choose to send.
Your credit balance, top-ups, auto-buy settings, the leads you unlock, the outcomes you report and any refund requests.
Payments are handled by Stripe, as described below.

Information from address subscribers

Company name, contact name, email, phone (optional) and destination website, entered at checkout.
Billing details are collected and stored by Stripe. We receive your Stripe customer ID, subscription status and the last details Stripe shares with merchants; we never receive your full card number.

Information from visitors

When someone opens a roofing.company page we record the time, the page, the referring page, any campaign (UTM) tags, whether the visitor appears to be an automated bot, and a visitor ID. The visitor ID is a code derived one way from the IP address and browser and kept in a first-party cookie, so we can count people rather than page loads; it cannot be turned back into an IP address. We do not store raw IP addresses. On the estimate page we also count how far visitors get through the steps of the form.

Information from businesses we contact

We may email roofing businesses at their published business email address about leads or open city addresses in their area. Every such email says who we are and how to opt out. Reply STOP, or ask us to stop, and we will not email that address again.

How we use it

To pass homeowners' estimate requests to a roofing company, and to run the roofer dashboard, credits and billing.
To answer messages, run address subscriptions and support our customers.
To send transactional emails: new-lead alerts to roofers, sign-in links, receipts, payment problems and account changes.
To count visits and measure our ads, and to filter out bots.
To prevent fraud, spam and abuse, and to meet legal obligations.

Who we share it with

Apart from sending a homeowner's request to the one roofer described above, we use these service providers, each only to provide their service to us:

Stripe, for payments and billing.
SendGrid, for email delivery.
CallRail, which carries the text messages sent to and from our text number.
OpenRouter and the AI model provider it routes to, which process the messages you type in our chat so that we can reply.
Mapbox, which receives the ZIP code or address you type to find your city and suggest addresses, and draws our maps.
Twilio, which sends text messages, such as a phone verification code, if we turn that on.
Meta (Facebook), when our advertising measurement is turned on: the estimate page may load the Meta Pixel, and we may tell Meta that a request was made, with your email and phone number in hashed form and your browser's IP address and type, so we can measure our ads.
Cloudflare, for DNS, security and delivering our web pages and email.
Google Fonts, which serves the fonts on some of our pages and receives your browser's IP address when it does.
Our hosting provider.

We may disclose information if the law requires it. We do not sell or rent personal information to anyone else.

Cookies and browser storage

A visitor ID cookie (rc_vid), kept up to a year, used to count visitors and to let you pick up our chat where you left off.
A session cookie so the estimate form, the chat and sign-in work. It ends when you close your browser or sign out.
Our chat keeps your conversation in your own browser's storage for 7 days, so it is still there if you reload the page or come back. Clearing your browser data removes it.
When our advertising measurement is turned on, the Meta Pixel may set its own cookies.
Our admin area sets a sign-in cookie for our own staff.

City address pages set no advertising cookies.

Retention

Homeowner requests, chats and messages are kept for up to 2 years, so we can handle questions, disputes and refunds, unless you ask us to delete them sooner. Individual visit records are deleted after 2 years. Roofer accounts, credit records, subscriber and billing records are kept while the account or subscription is active and afterwards as required for tax and accounting.

Security

Pages are served over HTTPS, passwords are stored only as one-way hashes, and card details never reach our servers. No system is perfectly secure, but we limit who can access personal information to what is needed to run the service.

Your choices

You can ask to see, correct or delete your information by emailing [email protected]. Depending on where you live, you may have further rights under local law, and we will honor them. Some records, such as the record of your agreement to be contacted, must be kept for legal reasons even after a request.

Children

The service is for homeowners and businesses and is not directed at children under 16. We do not knowingly collect their information.

Changes

If we change this policy we will update the date at the top of this page, and email roofers and address subscribers about material changes.

Questions about this page? Email [email protected].