RoofBot RoofBot
Features Pricing About Contact
Log in Start free trial
FeaturesPricingAboutContact Log in Start free trial
Legal

Privacy Policy

Last updated: March 2026  ·  Effective: March 2026

Loot Fruit LLC (an Arizona limited liability company) operates the RoofBot platform ("we," "us," "our"). This Privacy Policy describes how we collect, use, share, and protect information when you use our service. It applies to roofing contractors who use our platform ("Customers") and to homeowners who interact with RoofBot-powered SMS numbers ("End Users"). This policy does not apply to information we collect from other sources.

1. Information We Collect

From Customers (roofing contractors)

  • Account information: Name, company name, email address, phone number, city, state, and timezone provided during signup
  • Billing information: Payment details processed by Stripe. We do not store credit card numbers — Stripe handles all payment processing and is PCI-DSS compliant
  • Business settings: Google Calendar ID, service area zip codes, business hours, Google Review link, bot name, and any custom instructions you configure
  • Usage data: Dashboard activity, features used, and session information
  • Communications: Any messages or emails you send to us

From End Users (homeowners interacting with the SMS bot)

When homeowners interact with a RoofBot-powered SMS number, we collect and process the following information on behalf of our Customer (the roofing contractor):

  • Phone number
  • Name (if provided during the conversation)
  • Property address (if provided during the conversation)
  • Nature of the roofing issue as described in the conversation
  • Full text of SMS conversations
  • Appointment times, if a booking is made

In this relationship, the roofing contractor is the data controller (they own and are responsible for this data) and Loot Fruit LLC acts as a data processor on their behalf. End Users are interacting with an AI assistant acting on behalf of a specific roofing contractor, not directly with Loot Fruit LLC.

From Neighbor Blast contacts

When Customers use the Neighbor Blast feature, we process property ownership data (name, address, phone number) obtained from third-party property data providers (currently BatchData) to identify homeowners near a completed job site. This data is used solely to facilitate the Customer's outreach campaign. Individuals in this category have not previously interacted with RoofBot or necessarily with the Customer.

From insurance supplement submissions

When Customers paste insurance scope documents into the Supplement AI feature, those documents may contain homeowner names, addresses, claim numbers, and damage details. This content is transmitted to Anthropic's Claude API for analysis and stored in association with the Customer's account.

Automatically collected

  • Server logs including IP addresses and request timestamps
  • Browser cookies used for session management (see Section 5)
  • Error logs used for debugging and service improvement

2. How We Use Information

PurposeInformation usedLegal basis
Provide, operate, and improve the ServiceAll categoriesContract performance
Process payments and manage subscriptionsBilling, account infoContract performance
Send automated SMS on behalf of CustomersEnd User phone, nameLegitimate interest (Customer's)
Book appointments in Google CalendarName, address, timeContract performance
Send service notifications to CustomersAccount infoContract performance
Respond to support requestsCommunicationsLegitimate interest
Detect and prevent fraud or abuseUsage data, account infoLegitimate interest
Comply with legal obligationsAs requiredLegal obligation

We do not sell personal information to third parties. We do not use End User data (homeowner data) for advertising purposes or for any purpose other than providing the Service to the Customer who collected it.

3. Data Sharing

With Customers

Homeowner conversations and lead information are visible to the roofing contractor whose bot handled the conversation. This is the core function of the Service.

Service Providers (Sub-processors)

We share information with the following service providers only to the extent necessary to provide the Service:

  • Twilio: SMS delivery and phone number provisioning. Privacy Policy
  • Anthropic: AI conversation processing. SMS conversation content is transmitted to Anthropic's API for response generation. Per Anthropic's API usage policy, API inputs and outputs are not used to train Anthropic's models. Privacy Policy
  • Supabase: Database hosting (hosted on AWS). Privacy Policy
  • Stripe: Payment processing. Privacy Policy
  • Railway: Server hosting. Privacy Policy
  • Google: Calendar integration and geocoding. Used only when Customers have connected their Google Calendar. Privacy Policy
  • BatchData: Property ownership data for the Neighbor Blast feature. Privacy Policy
  • Resend: Transactional email delivery. Privacy Policy

Legal Requirements

We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of Loot Fruit LLC, our Customers, or others.

Business Transfers

If Loot Fruit LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4. SMS Messaging

RoofBot operates SMS messaging on behalf of roofing contractors. When a homeowner texts a RoofBot number or receives an auto-text after a missed call:

  • They are communicating with an AI assistant acting on behalf of a specific roofing contractor
  • They can opt out of all messages at any time by replying STOP, UNSUBSCRIBE, or CANCEL
  • Opt-out requests are processed immediately; no further messages will be sent to opted-out numbers
  • Opt-out records are retained indefinitely to prevent future contact
  • Standard message and data rates may apply depending on the recipient's carrier
  • For questions about messages received, homeowners may reply HELP or contact the contractor directly

5. Cookies and Tracking

Our website (www.roofbot.org) uses minimal cookies:

  • Session cookies: Used to maintain login state for the admin panel. These are deleted when you close your browser.
  • Functional cookies: Used to remember dashboard state and preferences. These expire within 30 days.

We do not use advertising cookies, third-party tracking pixels, or cross-site tracking. We do not serve ads and do not share data with advertising networks. Most modern browsers allow you to control or disable cookies in your settings.

6. Data Retention

  • Active accounts: All data retained for the duration of the subscription
  • Cancelled accounts: Lead and conversation data is retained for 90 days after cancellation, then permanently deleted. Account information (name, email, billing history) is retained for up to 7 years for legal, tax, and accounting purposes.
  • Opted-out numbers: Opt-out records are retained indefinitely to ensure we never contact opted-out numbers again
  • Supplement analyses: Retained for the duration of the Customer's account, then deleted with other account data
  • Neighbor Blast data: Retained for the duration of the campaign and then deleted within 90 days of account cancellation

7. Data Security

We implement industry-standard security measures including:

  • Encrypted connections (HTTPS/TLS) for all data in transit
  • Encrypted database storage via Supabase (hosted on AWS)
  • Access controls limiting who can view sensitive data
  • Regular security reviews of our infrastructure
  • Dashboard access restricted to UUID-based URLs not shared publicly

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information and will notify affected users of any data breach as required by applicable law.

8. Your Rights (Customers)

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention requirements)
  • Request a portable copy of your data
  • Object to certain types of processing
  • Withdraw consent where processing is based on consent

To exercise these rights, email privacy@roofbot.org. We will respond within 45 days. We may ask you to verify your identity before fulfilling a request.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers (name, email, phone number, IP address)
  • Commercial information (subscription and billing records)
  • Internet or network activity (usage logs, dashboard activity)
  • Geolocation data (city and state level only)
  • Professional information (company name, business type)
  • Customer communications (SMS conversations processed on behalf of Customers)

Your California Rights

  • Right to Know: You may request information about the personal information we collect, use, disclose, and sell
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions
  • Right to Correct: You may request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is necessary, but you may contact us to confirm.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
  • Right to Limit Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide the Service

To exercise California rights, email privacy@roofbot.org with "California Privacy Request" in the subject line. We will respond within 45 days (extendable to 90 days with notice).

10. End User Rights (Homeowners)

Homeowners who have interacted with a RoofBot-powered number can:

  • Opt out of all future messages at any time by texting STOP to the number that contacted them
  • Request deletion of their data by emailing privacy@roofbot.org
  • Request information about what data we hold by emailing privacy@roofbot.org
  • Contact the roofing contractor directly for questions about the business relationship

11. TCPA Compliance

RoofBot processes SMS messages in compliance with the Telephone Consumer Protection Act (TCPA). Our Customer roofing contractors are responsible for ensuring they have appropriate consent before using RoofBot to contact homeowners. RoofBot provides STOP opt-out mechanisms on all SMS communications and processes opt-outs immediately. For complaints about messages received, please contact privacy@roofbot.org.

12. Children's Privacy

RoofBot is a B2B service for roofing contractors and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a minor, we will delete it promptly.

13. U.S.-Only Service

RoofBot is intended for use by roofing contractors operating in the United States. We do not knowingly provide services to individuals or businesses outside the United States. If you are accessing the Service from outside the United States, you do so at your own risk and are responsible for compliance with your local laws. This policy is not intended to comply with the EU General Data Protection Regulation (GDPR) or similar non-U.S. frameworks.

14. Do Not Track

Our website does not respond to "Do Not Track" signals from browsers, as there is no industry-standard protocol for how such signals should be handled. We do not engage in cross-site tracking regardless of DNT signals.

15. Changes to This Policy

We may update this Privacy Policy periodically. We will notify active Customers of material changes by email at least 14 days before they take effect. Non-material changes may take effect immediately. Continued use of RoofBot after changes take effect constitutes acceptance of the updated policy. The "Last updated" date at the top reflects the most recent revision.

16. Contact

  • Privacy inquiries: privacy@roofbot.org
  • General: hello@roofbot.org
  • Entity: Loot Fruit LLC
  • Mailing address: 3084 E Linda Ln, Gilbert, AZ 85234
  • EIN: 41-5050369
RoofBotRoofBot

AI lead management for roofing contractors.

Product
FeaturesPricingStart free trial
Company
AboutContact
Legal
Privacy PolicyTerms of Service
© 2026 Loot Fruit LLC · RoofBot
PrivacyTermsSupport