Privacy Policy

Last updated: September 6, 2026

RoofPropage builds and hosts websites for roofing businesses. We operate the platform; the roofing business owns its site. When a homeowner submits a quote request on one of those sites, that request is passed to the roofing business that owns the site so they can follow up — that is the whole point of the form. This page explains, in plain English, what we collect and how we use it.

What we collect

From site owners: the email address you sign in with (we use passwordless magic-link login), and, if you choose to add them, a notification email address and phone number for receiving leads. If you upload photos or a logo for your site, we store those too.

From homeowners: when someone fills in a quote form on a roofing site we host, we collect the name, phone number, optional email address, optional property address or ZIP code, and free-text message they submit. We also record how the visit reached that site — the campaign tags in the link (utm_ parameters, gclid, fbclid), the referring website, and the page they landed on — so the roofing business can tell which of their ads or listings produced the enquiry. We store the minimum needed to deliver that lead and let the roofing business reply to it.

From visitors to our free tools: the tools on roofpropage.com/tools work without an account. Using one counts as an anonymous event on our side that carries what you gave the tool — the city, the location or the website address you typed — tied to the session id below, so we can see which tools get used and stop abuse. If you choose to type in your email to have a link or your result sent to you, we store that email, which tool you used, the score it gave you if the tool has one, the exact consent sentence you saw, an anonymous session id and a scrambled (hashed) version of your IP address that we use only to spot abuse. That gets you the one email you asked for and nothing else — we don’t add you to a list.

Newsletter signups: the free tools and the roofing-license pages carry a separate box to join Pressure Test (pressuretest.news), our newsletter about AI tools for roofers. That is a different choice from the report email above, and it says so where you type your email. If you sign up, we store your email, the page you signed up on, the exact consent sentence you saw, an anonymous session id and a scrambled (hashed) version of your IP address that we use only to spot abuse. When Pressure Test launches, that list moves to Beehiiv, the service that sends it, which will ask you to confirm your address before the first issue, and every issue carries a one-click unsubscribe link. To come off the list before then, email us at the address below and we will remove you within 30 days.

Automatically: basic usage analytics and error reports that help us keep the product working and fix problems. When we run ads, we also use advertising and measurement tools — the Meta (Facebook) Pixel and Google Ads tags — to understand which ads bring people to RoofPropage and whether our marketing works. If you arrive from one of our ads, we record the ad-click and campaign identifiers in the link (such as Google’s gclid, Meta’s fbclid, and utm_ parameters) so we can attribute your visit to the right campaign.

How we use it

We use this information to sign you in, generate and host your site, deliver homeowner leads to the roofing business, keep the service running and reliable, and measure and improve our advertising. We don’t sell your personal information in the everyday sense of the word — but note that showing you our ads through Meta and Google, and sharing the limited data their pixels collect, can count as “sharing” or a “sale” of information under some U.S. state privacy laws (such as California’s). See “Your advertising choices” below to opt out.

When you generate a site, we send the business name, city, and phone number you enter to Anthropic’s Claude API to write the site copy. We do not send it homeowner lead details.

Session recordings and speed measurement

On our own pages — this website, the site builder and the owner dashboard — we use PostHog’s session replay to record how the pages are used, so we can see where people get stuck and fix it. Those recordings are masked before they leave your browser: everything you type into any field, all the text on the page and the details behind links and buttons (a phone number or email address a button dials or writes to, for example) are replaced with placeholders, so a recording shows the layout, the page addresses you visited and where you clicked — never the words you typed or read, so not your details or your leads. Images on the page, such as a logo or photo you uploaded, can appear. We never record the roofing websites we host for our customers, on a roofpropage.com address or on their own domain — a homeowner visiting a roofer’s site is not recorded. To opt out, turn on your browser’s Global Privacy Control or Do Not Track setting: when either is on, the in-browser analytics and the recorder do not run at all for your visit. Our servers still count the milestone events they count for everyone — a site was built, claimed or went live, a checkout was started, a lead was delivered, a free tool was used — and those carry ids, the site address, any ad-click identifiers described above and a few of the facts you gave the builder or a tool, such as the city; never a homeowner’s details.

Separately, every page we serve — including the roofing websites we host — reports its loading speed to Vercel Speed Insights, the performance tool of our hosting provider. Each report carries how fast the page loaded (the Core Web Vitals), the page address, your browser, device type and operating system, your rough connection speed and your country. Vercel states it does not store your IP address or anything that would identify you or link one page view to the next; it is not a recording.

Who processes your data

We rely on a small number of trusted service providers to run RoofPropage:

Vercel — hosting for the app and generated sites, and Speed Insights, the page-loading-speed measurement on every page we serve, customer sites included.
Supabase — database and account sign-in, where site and lead data is stored.
Resend — sends lead notification emails to the roofing business.
Beehiiv — sends Pressure Test, our newsletter, and holds the list of people who signed up for it once it launches.
Sentry — error monitoring so we can catch and fix bugs.
PostHog — product analytics and masked session recordings of how our own pages are used (see “Session recordings” above); never on customer sites.
Meta — advertising-measurement pixel, active only when we’re running ads. While it is active and you buy a plan, our server also tells Meta about that one purchase (a hashed, unreadable form of your email, the browser you used to buy, and the amount) so the ad that brought you is credited once rather than twice; it is never sent if your browser signalled Do Not Track or Global Privacy Control when you clicked Go Live.
Google Ads — advertising-measurement tags, active only when we’re running ads.
Anthropic — generates your site’s written copy from the details you enter.
Stripe — takes and stores your card and billing details, and handles every payment and refund. Your full card number goes straight to Stripe; it never reaches us and we never store it.
CompanyCam — only if you, the site owner, connect it: we use the access token you paste to read your own job photos from CompanyCam and copy the ones you pick onto your site. We don’t store the token, and nothing goes back to CompanyCam.
Vercel Domains — the registrar when we buy a domain for you. Domain registries require registrant contact details, so a domain we register for you carries ours until you transfer it out.

How long we keep things

While you have an account, we keep your site, your leads and your billing history so that they are there when you need them. If you cancel, your account and content stay in place so you can publish again later — delete them yourself from your dashboard whenever you like, or ask us and we will. Homeowner leads belong to the roofing business that received them and are kept for as long as that business keeps its account, unless the business or the homeowner asks us to remove them. Error reports (Sentry), product analytics and session recordings (PostHog) and the speed measurements (Vercel) are held by those providers under their own standard retention periods. The email you give one of our free tools is kept until you ask us to delete it — we don’t clear those automatically today. A newsletter signup is kept until you unsubscribe or ask us to remove it. If you ask us to delete your data, we remove it within 30 days — except records we are required to keep, chiefly payment and tax records held by Stripe and by us.

Cookies

Our sign-in provider, Supabase, sets the cookies that keep you logged in (and a short-lived one while a sign-in link is being checked). We also set three small first-party cookies of our own: an anonymous session id (a random string, no personal information, kept for 90 days) when you use the site builder, a free tool, the newsletter signup box, the dashboard or the owner tools on your own site, so we can rate-limit those and spot abuse; a 30-day cookie set when you build a site, so that only the browser that built it can finish setting it up before you sign in; and, if you arrive at our own pages from one of our ads, a 90-day cookie holding the ad-click and campaign identifiers described above so we can credit the right campaign — that one is never set if your browser sends a Do Not Track or Global Privacy Control signal, and never on the roofing websites we host. A homeowner sending a quote request gets no cookie from us. When our advertising pixels are active, Meta and Google also set cookies that help us measure ad performance. While those pixels are active we also keep a short-lived marker in your browser’s local storage so that building one site is counted once rather than every time you reload the page; it holds no personal information and it is not stored at all if you have opted out. You can block these with your browser’s cookie controls or a Global Privacy Control (GPC) signal — see “Your advertising choices” below.

Your advertising choices

You can opt out of this ad measurement at any time. If your browser sends a Global Privacy Control (GPC) or Do-Not-Track signal, we don’t load the advertising pixels for your visit. You can also opt out through Google’s Ads Settings and your Meta ad preferences, or use your browser’s cookie controls. California and other state residents can treat this as our “Do Not Sell or Share My Personal Information” notice — turning on GPC in your browser exercises that choice automatically.

Getting a copy of your data, or deleting it

You can do both yourself, right away, from your dashboard: at the bottom of each site’s edit page there is a button to download a copy of everything that site holds (your pages, your leads, your previous versions, your web address and a summary of your plan) and a control to delete that site for good, and at the bottom of your dashboard there is a control to delete your whole account — every site, every lead, your billing record and your login. Deleting is immediate and cannot be undone, so download a copy first.

If you would rather we did it, or you no longer have access to your account, email support@roofpropage.com. We are a small product and handle those requests by hand, so please allow a little time for us to get to them — we aim to answer within 30 days. Homeowners whose details were sent to a roofing business through one of our sites can email the same address to have them removed.

Who to write to

RoofPropage, operated by GearyWorks LLC, is at 1380 Rio Rancho Blvd SE #470, Rio Rancho, NM 87124. Any privacy question can go to support@roofpropage.com.