Privacy Policy

• Customers(property owners) who submit information through a contracting business's website, the Platform, signed proposals, lead intake forms, or SMS/email conversations with platform users.
• Subcontractors who are invited to the Platform to receive work orders, exchange job documents, and coordinate scheduling.
• Staff and account administrators of the contracting business operating the account, who use the Platform to do their jobs.
• Prospective B2B customers evaluating the Platform for their own contracting businesses.

If you are an employee, contractor, or business partner with a separate written agreement that conflicts with this Policy, that agreement controls.

The Platform uses cookies and similar technologies necessary for authentication, session management, and core functionality. These cookies include:

• Authentication session cookies (provided by our auth vendor)
• External-user session cookies (for subcontractor logins)
• A mode-disambiguation cookie

We may also use analytics to understand how the Platform is used. You can control or disable non-essential cookies in your browser. Disabling strictly necessary cookies will break sign-in and core features.

We use information to:

• Respond to inquiries and provide roofing services
• Schedule inspections, repairs, replacements, and follow-up work
• Assist with insurance claim documentation and communication
• Send service updates, project status notifications, appointment reminders, and signature requests
• Mediate communication between you and our staff or subcontractors
• Maintain accurate business and customer records
• Detect, prevent, and address technical issues, fraud, and abuse
• Improve the Platform's features, performance, and security
• Comply with legal obligations and protect our legal rights
• Send service-related messages by SMS, email, or phone where you have consented or where the messages are transactional and reasonably expected in connection with the project

We do notuse customer data to train AI models. We do use AI subprocessors (see Section 6) to provide features such as drafting assistance, voice transcription, and document analysis. These vendors are contractually prohibited from training on our customers' content.

We do not sell, rent, or trade your personal information. We share limited information only as follows:

• Service Providers / Subprocessors: With vendors who help us operate the Platform and provide services (see Section 6 below). Each is bound by confidentiality and data-protection obligations.
• Insurance Carriers and Adjusters: When necessary to support storm damage claims you have authorized us to handle.
• Subcontractors: When work is assigned to a subcontractor, we share project and contact information necessary for them to perform the work.
• Legal Requirements: When required to comply with applicable law, court orders, subpoenas, regulatory requests, or to protect rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of business assets, subject to standard confidentiality protections.

We rely on the following categories of subprocessors to operate the Platform. A current named list will be published at /legal/subprocessors (page coming soon). Current categories include:

• Hosting and infrastructure
• Application database (storing your account, project, and message data)
• Authentication and identity
• OAuth broker (for third-party app connections)
• SMS and voice (Twilio, smrtPhone)
• Transactional email
• AI inference (text, vision, voice transcription, voice synthesis)
• Image and video generation
• Roof measurement vendor
• Photo synchronization vendor
• Payment processing (we never see card numbers; the processor holds them)
• Error logging and analytics

Each vendor is subject to a written data-processing agreement and is contractually limited to using your data only to provide the contracted service.

We implement administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), encryption at rest where supported by our database vendor, role-based access control, tenant isolation, audit logging, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, satisfy legal and contractual obligations, resolve disputes, and enforce agreements. Specifically:

• Customer project records (jobs, proposals, signatures, photos): 7 years (tax and warranty basis)
• Communication records (SMS, email transcripts, call logs): 18 months (carrier dispute coverage)
• Account and authentication data: for the life of the account plus 90 days after closure
• Diagnostic logs: 30 days rolling
• Audit logs: 7 years (required for compliance)
• SMS consent records: 4 years after revocation (TCPA statute of limitations + buffer)

When information is no longer needed, we delete or anonymize it.

Depending on your state of residence, you may have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request deletion of your personal information, subject to legal exceptions
• Portability — receive your information in a machine-readable format
• Opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising
• Limit use of sensitive personal information — we do not use sensitive personal information for inferences
• Non-discrimination — you may exercise these rights without retaliation
• Authorized agent — you may designate an agent to act on your behalf, subject to verification

The Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

The Platform is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States. We do not currently market the Platform to users in the European Economic Area, United Kingdom, or other jurisdictions that require additional cross-border transfer mechanisms.

The Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last Updated" date. Where required by law, we will provide additional notice.

Email: info@weathercontracting.com