Privacy Policy

Effective September 6, 2026

What we collect

Your email (for sign-in), your home's details (address, purchase and mortgage basics you confirm — estimates are fine and editable), your inspection report and the data we parse from it, and what you add: statuses, records, photos, calendar items. For paid memberships we keep your plan and payment status — card details go directly to Stripe and we never see or store card numbers. We record first-party usage events (which features get used) in our own database to improve the product. Inside the app there are no ad trackers and no third-party analytics selling your behavior. Our public marketing pages (the homepage, the sign-up start pages and ad landing pages) do carry standard advertising and analytics tags from Google (Google Ads and Google Analytics) and Reddit, which tell us whether an ad led to a sign-up and how these pages are used; they never run on any page where your home data lives. When sign-up measurement involves an email address, it is shared only as a one-way privacy-protecting hash, never in plain text.

The gift, before you claim it

When your inspector gifts you a membership, they share your report and delivery details with us so we can prepare it — like a wrapped present held at the door. Until you claim: we never contact you except one reminder on your inspector's behalf; we never use the data for anything else; and if you don't claim within 90 days, we delete it automatically — report, email, everything but an anonymous counter. The same holds when you upload a report yourself and don't finish signing up: 90 days, then it's deleted.

How we use your data

To run your home's manual — and nothing else. We do not sell your data. We do not share it with anyone except the service providers who run Rooftree, each bound to process it only for us: Supabase (database and storage), Vercel (hosting), Resend (outbound email), Postmark (inbound report delivery), Stripe (payments), Anthropic (reading your report text and the photos you take, under terms that bar using your data to train models), OpenAI (drawing your house and the drawings in Snap from the photos you take, under API terms that do not use your data to train models), and RentCast (home value and market data, which receives your home's address). Your inspector sees that the report they delivered was claimed and how many of their homes were active this month, never your activity inside the app.

Your rights

Export or delete: email support@rooftree.com and we'll export your household's data or delete it entirely, within 30 days. Co-owners you invite can see household data; removing a member removes their access.

Security

Data is encrypted in transit and at rest; access is enforced row-by-row in the database so households can only ever read their own homes. Sign-in links are single-use and expire.

Changes & contact

Material changes will be announced in the app. Questions: support@rooftree.com.

This policy covers the pilot program and will be reviewed by counsel before general availability.