Last updated: March 2026
RoofBot ("we," "us," or "our") operates the RoofBot platform, which provides AI-powered SMS lead management services for roofing contractors. This Privacy Policy explains how we collect, use, and protect information when you use our service.
1. Information We Collect
From roofing contractors (our customers)
- Account information: Name, company name, email address, phone number, city, state, and timezone provided during signup.
- Billing information: Payment details processed by Stripe. We do not store credit card numbers — Stripe handles all payment processing.
- Business settings: Google Calendar ID, service area, business hours, Google Review link, and any custom bot instructions you configure.
- Usage data: Information about how you use the RoofBot dashboard, including pages visited and features used.
From homeowners (end users of the SMS bot)
When homeowners interact with the RoofBot SMS bot on behalf of our contractor customers, we collect:
- Phone number
- Name (if provided during the conversation)
- Property address (if provided during the conversation)
- Nature of their roofing issue (as described in the conversation)
- The full text of SMS conversations
- Appointment times, if they book an inspection
This information is collected on behalf of and for the benefit of our contractor customers. Homeowners interact with RoofBot as part of their communication with a roofing contractor, not directly with RoofBot Inc.
Automatically collected
- Server logs including IP addresses and request timestamps
- Error logs used for debugging and service improvement
2. How We Use Information
We use the information we collect to:
- Provide, operate, and improve the RoofBot service
- Process payments and manage subscriptions
- Send automated SMS messages on behalf of contractor customers
- Book appointments in Google Calendar on behalf of contractor customers
- Send service-related notifications (booking alerts, morning digests) to contractors
- Provide customer support
- Comply with legal obligations
- Detect and prevent fraud or abuse
We do not sell personal information to third parties. We do not use homeowner data for advertising purposes.
3. Data Sharing
We share information only in the following circumstances:
- With contractor customers: Homeowner conversations and lead information are visible to the roofing contractor whose bot handled the conversation. This is the core function of the service.
- Service providers: We use Twilio for SMS delivery, Supabase for database hosting, Anthropic for AI conversation processing, Stripe for payment processing, and Railway for server hosting. Each provider has its own privacy policy.
- Google Calendar: If a contractor has connected Google Calendar, booking details (name, address, appointment time) are sent to their calendar as part of the service.
- Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of RoofBot, our customers, or others.
4. SMS Messaging
RoofBot operates SMS messaging on behalf of roofing contractors. When a homeowner texts a RoofBot number or calls and receives an auto-text:
- They are communicating with an AI assistant acting on behalf of a specific roofing contractor
- They can opt out of messages at any time by replying STOP, UNSUBSCRIBE, or CANCEL
- Opt-out requests are processed immediately — no further messages will be sent to opted-out numbers
- Standard message and data rates may apply depending on the homeowner's carrier
5. Data Retention
- Active accounts: We retain all data for the duration of the subscription.
- Cancelled accounts: Lead and conversation data is retained for 90 days after cancellation, then deleted. Account information is retained for up to 7 years for legal and accounting purposes.
- Opted-out homeowners: We retain opt-out records indefinitely to ensure we never contact opted-out numbers again.
6. Data Security
We implement industry-standard security measures including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Encrypted database storage via Supabase
- Access controls limiting who can view sensitive data
- Regular security reviews of our infrastructure
No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Request a copy of your data in a portable format
- Object to certain types of processing
To exercise these rights, email us at privacy@roofbot.org. We will respond within 30 days.
8. Homeowner Rights
Homeowners who have interacted with a RoofBot-powered number can:
- Opt out of all future messages by texting STOP
- Request deletion of their data by contacting us at privacy@roofbot.org
- Request information about what data we hold by contacting us
9. TCPA Compliance
RoofBot operates in compliance with the Telephone Consumer Protection Act (TCPA). Our contractor customers are responsible for ensuring they have appropriate consent before using RoofBot to contact homeowners. RoofBot provides opt-out mechanisms on all SMS communications and processes opt-outs immediately.
10. Children's Privacy
RoofBot is a B2B service for roofing contractors. We do not knowingly collect information from anyone under 18 years of age.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify active customers of material changes by email at least 14 days before they take effect. Continued use of RoofBot after changes take effect constitutes acceptance of the updated policy.
12. Contact
Questions about this Privacy Policy: