Privacy Policy

Last updated: April 26, 2026 · Effective: April 26, 2026

Plain-English summary: We respect your privacy. We collect only what we need to provide our services and to communicate with you. We don't sell your data. We use trusted third-party tools (listed below) to run our business. You have rights — including the right to access, correct, or delete your data — and we make it easy to exercise them.

Contents

  1. Scope and who we are
  2. Information we collect
  3. How we use your information
  4. Legal basis for processing (GDPR)
  5. Who we share information with
  6. Cookies and tracking
  7. Data retention
  8. Your rights
  9. International transfers
  10. Security
  11. Children's privacy
  12. Changes to this policy
  13. Contact

1. Scope and who we are

This Privacy Policy describes how RoofProof ("RoofProof", "we", "us", "our") collects, uses, and protects personal information when you visit roofproof.io, contact us, or subscribe to our services. We act as a data controller for information you provide to us directly. We act as a data processor for personal information of leads and customers that we process on behalf of our clients (roofing contractors) under our service agreement. Information about the legal entity behind RoofProof, our principal place of business, and applicable cross-border data transfer safeguards is provided in Section 9 below.

2. Information we collect

2.1 Information you provide directly

2.2 Information collected automatically

2.3 Information about leads (data we process for clients)

When we run advertising campaigns for our clients, the campaigns generate leads — typically homeowners interested in roofing services. These leads submit forms or initiate phone calls. The information we collect about leads (typically: name, phone, email, address, type of inquiry, source campaign) is processed on behalf of our clients. Clients are the data controller for this information; RoofProof is the data processor.

3. How we use your information

We use the information we collect to:

We do not sell your personal information. We do not share it for cross-context behavioral advertising as defined by the California Consumer Privacy Act.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, our legal basis for processing your personal information depends on the purpose:

5. Who we share information with

We share personal information only with the following categories of recipients, and only as necessary:

Service Purpose Data shared
Paddle Subscription billing and tax compliance (Merchant of Record) Name, email, billing address, payment details
Stripe Payment processing Name, email, billing address, payment details
Wise Bank transfers and currency conversion Name, business name, banking details
Google Workspace Email and document storage Email content and attachments
Cloudflare Website hosting, DNS, security IP address (truncated), HTTP request data
Loom Video communications (audits and tutorials) Email if you watch a video link
Calendly Meeting scheduling Name, email, scheduling preferences
DocuSign / PandaDoc Contract signing Name, email, signature, business details

We may also disclose personal information when required by law, in response to valid legal requests, to protect our rights or the rights of others, or in connection with a business transfer (merger, acquisition, sale of assets) — in which case the recipient will be required to provide equivalent privacy protections.

6. Cookies and tracking

We use the minimum tracking technology necessary to operate our website. Currently, our website uses:

We may add additional analytics or advertising tools in the future. If we do, we will update this policy and present a cookie consent notice to visitors from regions where one is required.

7. Data retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected:

You may request earlier deletion at any time, subject to overriding legal obligations.

8. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

To exercise any of these rights, email margo@roofproof.io with your request. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

8.1 California residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and disclose, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. RoofProof does not sell or share personal information for these purposes.

9. International transfers

RoofProof is operated by Pushaev Artem, a sole proprietor based in Europe. Most of our service providers (Paddle, Stripe, Cloudflare, Google, etc.) are based in the United States, the European Union, or other jurisdictions. When personal information is transferred internationally, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses where applicable. Our specific country of establishment is disclosed on request to data subjects exercising their rights and to regulators.

10. Security

We use reasonable technical and organizational measures to protect personal information from unauthorized access, alteration, disclosure, or destruction. This includes:

No method of transmission or storage is 100% secure. If we become aware of a security breach affecting your personal information, we will notify you and the relevant authorities in accordance with applicable law.

11. Children's privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the date of the most recent change. For material changes, we will provide at least thirty (30) days' advance notice by email or by posting a prominent notice on our website. We encourage you to review this policy periodically.

13. Contact

For privacy questions, requests to exercise your rights, or concerns about how we handle your information, contact us:

If you are in the European Union, you also have the right to lodge a complaint with your local data protection authority. A list of national authorities is available at edpb.europa.eu/members.

© 2026 RoofProof. All rights reserved.