Privacy Policy

1. Introduction

Roof Drive LLC ("Roof Drive," "we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information, and the choices you have. It applies to:

our marketing website at roofdrive.com;
our web application at app.roofdrive.com (the "App"), a CRM and roofing business-management platform; and
related services we provide (together with the website and App, the "Service").

This Privacy Policy is governed by the laws of the State of Michigan, except that residents of other U.S. states are entitled to the rights and protections their state laws provide, as described in Section 11. The Service is intended for users in the United States.

1.1 The two roles we play

How we handle personal information — and who is responsible for it — depends on the context:

When we act as a "controller" (we decide how and why information is used): this covers information about our account holders and their personnel, and information about visitors to roofdrive.com and people who book a call or submit a form. For this information, the rights and choices in this policy apply directly to you, and you may contact us to exercise them.
When we act as a "processor" or "service provider" (we handle information on a customer's behalf and under their instructions): this covers the data our business customers load into the App about their own clients, prospects, jobs, and projects — including homeowners and other third parties (collectively, "Customer Content"). For Customer Content, our business customer is the controller. We process it under our agreement and applicable data processing terms, and we do not use it for our own purposes except to provide, secure, and improve the Service. If you are an individual whose information appears in a customer's account and you wish to exercise rights over it, please contact that business directly; we will assist them in responding as required by law.

2. Information We Collect

2.1 Account Information

Name, email address, phone number
Company name and business information
Login credentials and authentication data

2.2 Customer Content (handled as a processor)

Information our business customers enter into the App, which may include:

Their clients' and prospects' contact details
Job details, addresses, and project specifications
Photos, documents, and files
Notes and communications related to projects

We make these capabilities available; the business customer decides what to collect and is responsible for having a lawful basis and providing any required notices to the individuals involved.

2.3 Business Operations Data

Invoices, estimates, and payment records (see Section 6 regarding payment cards)
Crew and employee information entered by our customers
Usage and analytics data
Lead source and marketing attribution data

2.4 Sensitive Information

Some features may involve information treated as "sensitive" under certain state laws — in particular, precise geolocation where a customer uses crew- or device-location features. We use this information only to provide the requested feature and do not use or disclose it to infer characteristics or for advertising. Where state law requires, you may limit our use of sensitive personal information as described in Section 11. We ask that users not enter payment card numbers, full financial account numbers, government identifiers, or similar sensitive data into free-text or upload fields; our Terms of Service address this further.

2.5 Automatically Collected Information

When you use the Service, we and our providers automatically collect:

Device information and browser type
IP address and approximate location
Usage patterns and feature interactions
Information collected through cookies, pixels, session-replay tools, and similar technologies (see Section 8)

3. How We Use Your Information

We use information to:

Provide, maintain, secure, and improve the Service
Process transactions and send related information
Send technical notices, updates, support, and administrative messages
Respond to your comments, questions, and customer-service requests
Send marketing communications, subject to your choices (see Section 9)
Monitor and analyze trends, usage, performance, and stability
Detect, investigate, and prevent fraud, abuse, and security incidents
Comply with legal obligations and enforce our agreements

We do not use automated decision-making that produces legal or similarly significant effects about you without human involvement. Where we use artificial-intelligence tools, we do so as described in Section 7.

We share personal information in the following ways. The categories of recipients are described below; specific providers may change over time as we manage and improve the Service.

Service providers and subprocessors. With vendors who process information on our behalf to deliver the Service — for example, cloud hosting, payment processors, customer communications, product analytics, error and session diagnostics, and support tooling. These providers are bound by contract to use the information only to perform services for us. Current providers include, among others, GoHighLevel (booking, communications, and marketing automation), Stripe and other payment gateways (payment processing), and Userback and LogRocket (product feedback, error diagnostics, and session analysis).
Advertising and analytics partners. We use cookies, pixels, and analytics tools — which may include Google Analytics (including its advertising features) and advertising or conversion pixels from providers such as Google and Meta, and audience features within GoHighLevel — to measure and promote the Service. Because these partners may receive identifiers and activity data and use them for cross-context behavioral advertising, this activity may be considered a "sale" or "sharing" of personal information under certain state laws. You can opt out — see Sections 8 and 11.
At your direction or with your consent. When you ask us to share information, or otherwise consent.
Legal and safety. When required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Roof Drive, our users, or others, and to enforce our terms.
Business transfers. In connection with a merger, acquisition, financing, or sale of assets, with notice provided as required.

We do not sell or share Customer Content for cross-context behavioral advertising. We do not knowingly sell or share for advertising the personal information of consumers we know to be under 16 without the consent required by law.

5. Data Security

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

6. Payments

Payments are processed by PCI-DSS–compliant third-party payment gateways (such as Stripe). Roof Drive does not collect or store full payment-card numbers. Card data is transmitted directly to and handled by the payment processor under its own terms and privacy policy.

7. Artificial Intelligence

We may use artificial-intelligence tools and features — our own and those embedded in services we use — to help process service requests within the product, assist our support team, and improve the Service. Our use of AI is assistive: a human remains responsible for any decision that has a legal or similarly significant effect on a person; AI does not make those decisions on its own.

Where a provider offers the option, we contractually require that your information not be used to train that provider's models. We cannot, however, guarantee that every third party — including AI capabilities embedded within other tools we use — refrains from all model training, and you should not rely on an absolute guarantee to that effect.

8. Cookies and Tracking Technologies

We and our providers use cookies, pixels, tags, local storage, and session-replay tools on roofdrive.com and within the App to operate the Service, remember preferences, measure usage and performance, diagnose errors, and support marketing.

Session-replay and product-diagnostic tools (such as LogRocket and Userback) may record interactions with our pages and screens, including within the App, to help us understand usage, reproduce errors, and improve the product. We configure these tools to mask sensitive input fields and limit capture of personal information; even so, you can opt out of non-essential tracking as described below.

Your choices. You can manage non-essential cookies and tracking, and opt out of the sale/sharing of your personal information and of targeted advertising, through our "Your Privacy Choices" control (linked in our website footer). We also honor recognized opt-out preference signals, including Global Privacy Control (GPC) sent by your browser or device, and treat a valid signal as an opt-out for that browser or device. Strictly necessary functions cannot be disabled. Because these mechanisms rely on cookies or device signals, your choices may need to be set on each browser and device you use.

If the "Your Privacy Choices" control is not yet live in your region or browser, you can exercise these choices by emailing [email protected], and we will honor any recognized opt-out preference signal we receive in the meantime.

The booking page at /join embeds a scheduling and form widget provided by GoHighLevel (loaded from link.msgsndr.com). Information you submit through that widget is collected by GoHighLevel to provide the booking service and is also handled under GoHighLevel's privacy policy.

9. Marketing Communications

If you receive marketing email from us, every message identifies us as the sender, includes our physical mailing address, and provides a working way to unsubscribe. You can opt out of marketing email at any time using the unsubscribe link or by contacting us; we may still send you non-marketing messages about your account or the Service.

10. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, and afterward as necessary to comply with legal obligations, resolve disputes, maintain security, and enforce our agreements. Retention periods depend on the type of information and the purpose for which it is held; when information is no longer needed, we delete or de-identify it. We retain and delete Customer Content in accordance with our agreement with the relevant business customer.

11. Your Privacy Rights

Depending on where you live, applicable state privacy laws may give you some or all of the following rights with respect to personal information for which we are the controller:

Know / access the personal information we hold about you and how we use and share it
Correct inaccurate personal information
Delete your personal information
Portability — obtain a copy in a portable format
Opt out of the "sale" or "sharing" of your personal information
Opt out of targeted advertising
Opt out of profiling that produces legal or similarly significant effects
Limit the use of sensitive personal information
Non-discrimination for exercising your rights

How to exercise your rights

Submit a request by emailing [email protected], or use the "Your Privacy Choices" control for opt-out requests. We will verify your request, including by confirming your identity or, where applicable, your authority to act as an authorized agent. We respond within the time required by applicable law (generally 45 days, with an extension where permitted and with notice to you).

Appeals

If we decline your request, you may appeal by replying to our decision or emailing [email protected] with the subject line "Privacy Appeal." We will respond to your appeal within the period required by applicable law (generally 45 to 60 days). Where your state's Attorney General provides a complaint mechanism, we will tell you how to submit a complaint if your appeal is denied.

Customer Content

If your information appears in a business customer's account (Customer Content), that business is the controller. Please direct your request to them; we will assist them as required by law.

12. Children's Privacy

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Effective Date" above, and will provide additional notice where required by law. Your continued use of the Service after an update indicates your acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Roof Drive LLC 4164 Kenowa Ave SW, Grandville, MI 49418 Email: [email protected]