Privacy Policy

RoofHyve Master Privacy Policy

United States General Privacy | California Notice | Canada Privacy Rights

Owner / Publisher: RoofHyve Inc.

Product: RoofHyve

Effective Date: June 12, 2026

Last Updated: October 29, 2026

Audience: Roofing company users, customer portal users, sales reps/CSRs, employees/team members, website visitors, applicants, and contacts

Applies To: Website, Roofer App/Roofer Portal, Customer App/Customer Portal, Sales Rep Portal, admin/support interactions, notifications, and related services

1. Introduction

RoofHyve Inc. provides RoofHyve, a roofing business operations platform that helps roofing companies manage leads, estimates, proposals, customer portals, projects, tasks, subscriptions, team/HR records, attendance, payroll-related records, sales rep/CSR activity, and related business workflows. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use our websites, portals, mobile applications, and related services.

RoofHyve is primarily a platform provider. Roofing companies use RoofHyve to operate their own roofing, solar, gutter, and related exterior contracting businesses and to serve customers they bring into the platform. In many cases, the roofing company is responsible for the personal information it enters into RoofHyve, and RoofHyve processes that information to provide the platform.

2. Who This Policy Applies To

• Roofer App/Roofer Portal users, including company admins, estimators, project managers, office staff, and field employees.
• Customer App/Customer Portal users invited by a roofing company to view proposals, sign documents, submit files/images/messages, and manage project interactions.
• Sales Rep/CSR Portal users, including internal employees and external contractors who onboard or support roofing companies.
• Website visitors, support contacts, job applicants, and people who communicate with us.

3. Roles: Platform Provider, Business, Service Provider, Processor

For customer records, project records, employee records, attendance records, payroll-related records, and proposal documents entered by a roofing company, the roofing company generally determines why and how the information is used. RoofHyve acts as a service provider/processor for that information, except where we use information for our own business purposes such as account administration, billing, security, analytics, product improvement, legal compliance, and direct relationship management.

For information about our own website visitors, sales reps, CSR users, support contacts, billing contacts, and direct account administrators, RoofHyve may act as the business/controller responsible for that personal information.

4. Information We Collect

• Account and identity information: Name, email, phone number, username, role, company association, login credentials, user permissions.
  Primary sources: You, your employer/company admin, invited users.
• Company and subscription information: Company name, plan, subscription status, billing contact, Stripe customer identifiers, masked/hashed payment references, billing history, hibernation/read-only plan status.
  Primary sources: Company admins, Stripe, internal billing records.
• Customer and property information: Customer name, phone, email, address, property type, roof style, roof age, current issues, special instructions, service types, budget range, scope specifications, estimation type, appointment preference.
  Primary sources: Roofing companies and customer portal users.
• Insurance-related project information: Insurance claim involvement, claim number, agent name/email/phone, adjustor name/email/phone.
  Primary sources: Roofing companies and/or customers.
• Proposal and document information: Estimates, proposals, invoices, scope of work, warranties, draw schedules, discounts, PDFs, signed PDFs, typed/image signatures, audit logs, uploaded files/images/messages.
  Primary sources: Roofing companies, customers, system-generated records.
• Employee/team/HR information: Employee name, role, address/contact details, employment details, department, manager, employment type, duties, emergency contacts, ID/license/insurance fields, digital signature records.
  Primary sources: Company admins, employees, authorized staff.
• Attendance, payroll, and location information: Time in/out, entry type, travel, overtime, reason for entry, work hours, salary/hourly rates, bank details, tax IDs, SSN, payouts, precise or approximate location during attendance/check-in/check-out.
  Primary sources: Employees, mobile app, company admins, system logs.
• Sales rep/CSR information: Assigned roofing companies, referral invite activity, onboarding status, commission percentage, commission records, subscription billing/revenue for onboarded roofers.
  Primary sources: Sales reps, admins, billing/subscription records.
• Device, usage, and security information: IP address, device ID, browser type, operating system, login logs, activity logs, error logs, app interactions, referral pages, approximate location from IP.
  Primary sources: Automatically from websites, portals, mobile apps, hosting/security systems.
• Permission-based mobile data: Camera, gallery/photos, files, contacts, microphone, push notification tokens, location permissions when enabled or required for features.
  Primary sources: Your device and app permissions.
• Communications: Support messages, SMS, email, push notifications, call notes, feedback, training/support interactions.
  Primary sources: You, support staff, Twilio/email/push systems.
• Connected account data: Google account name, email address, account ID and profile picture; access tokens; Google Calendar events, read when you view your calendar and not stored.
  Primary sources: From Google, when you choose to connect Google Calendar.

5. Sensitive Personal Information

Some information handled by RoofHyve may be sensitive, including precise geolocation, Social Security numbers, tax identifiers, financial account/bank details, login credentials, signature records, insurance claim details, and payroll-related information. We use sensitive information only for permitted platform, security, payroll/attendance, legal, compliance, support, and business administration purposes, unless another use is disclosed and permitted by law.

6. How We Use Information

• Provide, operate, maintain, secure, and improve RoofHyve and related portals.
• Create and manage accounts, roles, permissions, subscriptions, hibernation/read-only access, and billing workflows.
• Process verified account deletion requests, revoke or restrict account access, delete or anonymize personal account profile information where possible, and retain required business, legal, security, and compliance records.
• Support lead management, appointment scheduling, estimation, proposal generation, electronic signatures, invoices, project/task tracking, customer communications, and document downloads.
• Enable customer portal login, proposal review, signing, rejection/cancellation, file/image/message uploads, and project visibility.
• Support team management, employee records, attendance, location-based check-in/check-out, leave, payroll-related tracking, and operational reporting.
• Calculate and display sales rep/CSR commissions, assigned roofer activity, referral invite activity, subscription billing, and revenue for onboarded accounts.
• Send service-related SMS, email, and push notifications, including reminders, proposal status updates, signed PDF alerts, billing notices, security alerts, and support messages.
• Process subscriptions through Stripe and support QuickBooks integration where enabled.
• Monitor security, prevent fraud, troubleshoot errors, audit activity, enforce terms, and comply with law.
• Analyze usage with tools such as Google Analytics to understand and improve product performance, subject to cookie and consent settings.

7. Legal Bases and Business Purposes

Depending on the applicable law and user relationship, we process information to perform contracts, provide requested services, comply with legal obligations, protect legitimate business/security interests, administer employment/contractor relationships, process consent-based permissions, and support rights requests. For Canadian users, collection, use, and disclosure must be for purposes a reasonable person would consider appropriate in the circumstances.

8. Location, Attendance, and Employee Monitoring Notice

RoofHyve may collect precise or approximate location information from roofer/employee mobile users during attendance sessions and check-in/check-out workflows. Continuous location collection should be limited to attendance/work activity periods and should not be used outside the disclosed operational purposes. Roofing companies are responsible for providing legally required employee notices, obtaining required consents, and configuring attendance/location use lawfully.

9. Camera, Photos, Files, Contacts, Microphone, and Push Notifications

The mobile apps may request access to camera, gallery/photos, files, contacts, microphone, and push notifications. These permissions are used to support project documentation, uploads, communication, customer/contact workflows, attachments, recordings or voice-enabled features where enabled, and notifications. Users may adjust permissions in device settings, but disabling permissions may limit functionality.

10. Payments and Billing

Stripe Checkout is used for subscription payment processing. RoofHyve does not intend to store full payment card numbers or card security codes. Stripe may provide payment tokens, customer IDs, transaction references, and masked or hashed card information. Roofing companies may also configure manual bank payment instructions for their own customers to pay invoices directly to the roofer. RoofHyve is not the bank, card issuer, or payment processor for such manual customer payments.

11. How We Disclose Information

• To the roofing company that controls or invited the customer/employee/user record.
• To authorized users within the same roofing company based on roles and permissions.
• To customer portal users for proposals, project information, documents, messages, and signatures relating to their own project.
• To sales reps/CSRs for assigned accounts, referral invite status, commission, subscription, and revenue visibility.
• To service providers and subprocessors such as Stripe, QuickBooks, Twilio, Microsoft Azure, Google Maps, Google Analytics, Firebase/Google Cloud, email/push notification providers, hosting, security, analytics, and support tools.
• To comply with law, enforce agreements, prevent fraud/security incidents, respond to legal process, or protect rights and safety.
• In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate protections.

12. Third-Party Services and Integrations

Third-party services process information under their own terms and privacy practices where applicable. Users should review those policies when enabling integrations.

• Stripe: Subscription checkout, payment processing, billing references, payment-event records.
• QuickBooks / Intuit: Accounting and bookkeeping integration where enabled by the Customer.
• Twilio: SMS, phone, verification, and communication delivery where enabled.
• Microsoft Azure: Cloud hosting, storage, infrastructure, compute, and related security tooling.
• Microsoft SignalR: Real-time updates and live notification delivery.
• Google Maps Platform: Maps, address lookup, geocoding, routing, and location-related features.
• Google Cloud / Firebase: Authentication support, Firebase Cloud Messaging push notifications, and app infrastructure where enabled.
• Google Analytics / Tag Manager: Website/app analytics and performance measurement, subject to cookie and consent settings.
• Google Calendar API: Optional. Shows your Google Calendar events alongside your RoofHyve appointments, with read-only access. See Section 12A.
• Microlink: URL metadata and link-preview generation.
• Email, push, monitoring, security, and support providers: Transactional communications, support, error logging, service monitoring, and security operations.

12A. Google User Data

This section explains how RoofHyve handles information we receive from Google when you connect your Google Calendar to RoofHyve. It applies in addition to the rest of this Privacy Policy, and controls if anything else in this policy conflicts with it.

What we access

Connecting Google Calendar is optional. If you connect it, we receive:

• Read-only access to the events on your Google Calendar. We read events from your primary calendar only, and only for the dates being viewed in RoofHyve.
• Your basic Google account details: name, email address, Google account ID and profile picture.

We cannot create, change or delete your events. We do not access your calendar settings, your list of calendars, your contacts, your email, or any other Google data.

How we use it

• To show your Google Calendar events next to your RoofHyve appointments, so you can avoid double-booking and choose appointment times that fit your schedule.
• To recognize RoofHyve appointment invitations you have already added to Google Calendar, so the same appointment is not shown twice.
• To show which Google account is connected.

We do not use Google user data for advertising, to build user profiles, to determine creditworthiness, or for any purpose other than these features.

Who can see it

• You see your own events in full: title, time, description, location and meeting link.
• If you are a member of a roofing company’s team, other users in your company who view the team calendar see only that you are busy and the start and end time of each event. They do not see its title, description, location or meeting link.
• A homeowner’s Google Calendar events are shown only to that homeowner.

RoofHyve personnel do not read your Google Calendar data unless you give permission (for example, to resolve a support request), it is necessary for security purposes such as investigating abuse, it is required by law, or the data has been aggregated and anonymized for internal operations.

Storage and retention

We do not store your calendar events. We read them from Google each time you open your calendar and send them to your device for display. We store the access tokens Google issues to us and your Google account details only while your calendar is connected.

Disconnecting and deletion

You can disconnect Google Calendar at any time in the app. When you disconnect, we ask Google to revoke our access and we delete the stored tokens and account details. If you delete your RoofHyve account, or your company removes you from its team, we disconnect Google Calendar in the same way. You can also remove RoofHyve’s access from your Google Account at https://myaccount.google.com/permissions. To ask us to delete any Google user data, email privacy@roofhyve.com.

Sharing

We do not sell Google user data. We do not share or transfer it to third parties, except to service providers that host our platform on our behalf under confidentiality obligations, when required by law, or as part of a merger, acquisition or sale of assets in which the recipient remains bound by this section.

Artificial intelligence

We do not process Google user data with artificial intelligence or machine learning tools, including RoofHyve AI, and we do not use it to develop, improve or train any AI or machine learning model.

Limited Use

RoofHyve’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. Cookies, Analytics, and Tracking Technologies

We may use cookies, pixels, SDKs, local storage, analytics tools, and similar technologies for login sessions, security, preferences, performance, analytics, and product improvement. Where required, users may receive cookie notices or consent choices. Browser settings may allow blocking or deleting cookies, but some features may not work properly. Additional details are provided in the RoofHyve Cookie Policy.

14. Data Retention

We retain information for as long as needed to provide RoofHyve, maintain accounts, support hibernation/read-only access, comply with legal obligations, resolve disputes, enforce agreements, maintain audit/security records, and support legitimate business purposes. Unless deleted or anonymized, customer/project/proposal data may remain after subscription cancellation, but access may be locked unless a hibernation/read-only plan or other permitted access arrangement is active.

Where a deletion request is submitted and verified, we will delete, anonymize, or restrict information as required by law, subject to exceptions such as legal obligations, accounting/tax retention, security logs, dispute records, signed proposal/audit records, backup retention, and information controlled by a roofing company.

When an individual user account is deleted, whether in the app or by request, RoofHyve may retain certain business records, including estimates, proposals, signed documents, invoices, customer/project records, job activity, payment or billing records, audit logs, security logs, and records required for legal, tax, accounting, compliance, dispute resolution, fraud prevention, or contract enforcement purposes. Where possible, personal account profile information will be deleted, anonymized, or restricted while preserving required business records.

15. Data Access, Correction, Deletion, and Portability

RoofHyve does not currently provide a general self-service bulk export feature through the product. This product limitation does not limit any access, correction, deletion, portability, or copy rights available under applicable privacy law. Where applicable law gives an individual the right to access, correct, delete, or obtain a copy of personal information, RoofHyve will respond to verified requests to the extent and within the timeframes required by law. Where the information is controlled by a roofing company, RoofHyve may direct the request to that roofing company or assist the roofing company in responding.

Users may also delete their individual user account themselves in the RoofHyve web portals and mobile apps, as described in Section 15A. This applies to the individual user account and related personal profile information where possible. It does not automatically delete company-controlled business records, customer records, proposals, signed documents, invoices, job history, audit logs, or other records that RoofHyve or the applicable roofing company may retain as described in this Privacy Policy.

15A. Account Deletion

Users can delete their individual user account themselves:

• Roofer Portal: My Profile > Delete Account, confirmed with the account password.
• Sales Rep Portal: Profile > Delete Account, confirmed with the account password.
• Customer Portal: Profile > Account > Delete Account, confirmed with a 6-digit code sent to the account’s email address.
• RoofHyve mobile apps: Settings / Profile > Account > Request Account Deletion.

Deletion takes effect immediately. The user is signed out on every device, the login is removed so the email address can no longer be used to sign in, and personal account profile information is deleted, anonymized, or restricted where possible. If the user connected Google Calendar, it is also disconnected, as described in Section 12A.

A homeowner has one Customer Portal login for every roofing company they work with. A homeowner who deletes their account loses access for all of them, leaves their service chats, and no longer receives emails or text messages from their roofing companies. Each roofing company keeps its own customer, project, proposal, invoice, and service records.

Because RoofHyve is a business operations platform used by roofing companies, deleting an individual user account does not automatically delete the roofing company workspace, tenant account, customer records, job records, estimates, proposals, signed documents, invoices, payment records, audit logs, or other business records. Certain records may be retained where required or reasonably necessary for legal, tax, accounting, security, fraud prevention, dispute resolution, contract enforcement, audit, compliance, or business recordkeeping purposes.

Historical business activity may remain visible to the relevant roofing company or authorized administrators, for example under the user’s name or as Deleted User, Former Employee, or similar wording where appropriate.

Company administrators may separately manage employee access through the Roofer Portal or admin tools. Deleting an individual user account does not delete the company account, subscription, tenant workspace, or business records controlled by the roofing company. A company owner must first either transfer ownership to another Main Administrator or delete the company. Deleting the company deactivates it for every employee, and its records are kept.

Users who cannot delete their account in the app may email privacy@roofhyve.com. RoofHyve may require reasonable identity verification, will process verified deletion requests within the timeframe required by applicable law, and will confirm when the request has been completed or if it cannot be fully completed due to lawful retention requirements.

16. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including role-based access controls, authentication controls, logging, hosted cloud infrastructure controls, encryption in transit, confidentiality obligations, security monitoring, and internal procedures. No system can be guaranteed to be 100% secure, and users are responsible for safeguarding login credentials and using appropriate account permissions.

17. Children’s Privacy

RoofHyve is not directed to children under 13 and is intended for business users, authorized employees/contractors, customers, and adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us.

18. United States Privacy Rights

Depending on where you live, you may have rights to request access, deletion, correction, a copy of your personal information, portability, opt-out of certain sale/sharing/targeted-advertising activities, limitation of certain sensitive information uses, and non-discrimination for exercising privacy rights. Requests may be submitted to privacy@roofhyve.com. We may verify your identity before responding. Authorized agents may submit requests where permitted by law.

19. California Privacy Notice

This section supplements the rest of this Privacy Policy for California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies to RoofHyve. Terms used in this section have the meanings given by the CCPA/CPRA.

• Identifiers: Name, email, phone, address, IP address, device ID, account ID, customer/company identifiers.
  Purpose / disclosure: Account management, customer/project workflows, security, support, billing, notifications, service providers.
• Customer Records / Cal. Civ. Code 1798.80(e): Contact details, payment/billing references, signature records, employment-related fields.
  Purpose / disclosure: Service delivery, billing, proposals, HR/attendance/payroll tracking, service providers.
• Protected Classification Characteristics: Employment-related information only where entered by a roofer/employer or required for HR/payroll workflows.
  Purpose / disclosure: HR/employee administration by roofing companies; legal compliance.
• Commercial Information: Subscriptions, invoices, proposals, service selections, budget range, payment preferences, purchases, refunds.
  Purpose / disclosure: Billing, project management, customer portal, analytics, service providers.
• Internet or Network Activity: Login logs, activity logs, browser/device data, app usage, analytics events.
  Purpose / disclosure: Security, fraud prevention, troubleshooting, analytics, product improvement.
• Geolocation Data: Precise/approximate location during attendance and check-in/check-out; IP-based approximate location.
  Purpose / disclosure: Attendance, timekeeping, project operations, security.
• Audio/Visual/Electronic Information: Uploaded photos/files/images/messages, support communications, signatures, potential microphone-enabled records if used.
  Purpose / disclosure: Project documentation, customer communication, support, proposals.
• Professional or Employment Information: Role, department, manager, employment type, duties, salary/hourly rate, leave, attendance, payroll records.
  Purpose / disclosure: Team/HR, attendance, payroll-related workflows, company administration.
• Sensitive Personal Information: SSN, tax IDs, bank details, precise geolocation, account credentials, signature records, insurance claim details.
  Purpose / disclosure: Provide requested services, payroll/attendance, security, legal compliance; not used to infer unrelated characteristics.
• Inferences: Usage patterns, role-based workflow preferences, dashboard/activity metrics.
  Purpose / disclosure: Product improvement, analytics, security, support.

20. Sale, Sharing, and Targeted Advertising

RoofHyve does not knowingly sell personal information for money. RoofHyve does not use Customer Data for cross-context behavioral advertising. If certain analytics, pixels, or advertising technologies are later deemed a “sale” or “sharing” under California law or similar state laws, RoofHyve will provide required notice and opt-out mechanisms. Where legally required, RoofHyve will recognize Global Privacy Control or similar opt-out preference signals for covered activities.

21. Sensitive Personal Information Limitation

RoofHyve uses sensitive personal information only for permitted purposes such as providing requested services, security, fraud prevention, employee/attendance/payroll-related workflows, compliance, support, and account administration. RoofHyve does not use sensitive personal information to infer unrelated characteristics.

22. Canada Privacy Rights

For Canadian users, RoofHyve and roofing companies must collect, use, and disclose personal information in a manner consistent with applicable Canadian privacy laws, including meaningful consent, limiting collection, limiting use/disclosure/retention, safeguards, openness, individual access, correction, and complaint handling. Where a roofing company controls the information, that company is responsible for required notices and consent, with reasonable assistance from RoofHyve where required.

For Quebec residents, where applicable, RoofHyve will provide privacy information in clear language, identify a privacy contact, provide information about technologies that identify, locate, or profile individuals, and support legally required access, correction, portability, and incident-handling processes.

23. International Transfers

RoofHyve is based in the United States and uses service providers that may process information in the United States and other jurisdictions. By using the Services or submitting information, personal information may be transferred to and processed in jurisdictions that may have different privacy laws than where you live. Where required, RoofHyve uses appropriate contractual and operational safeguards for cross-border processing.

24. Changes to This Policy

We may update this Privacy Policy from time to time. Changes become effective when posted unless a later effective date is stated or additional notice is required by law. Material changes may be communicated through the Services, email, or other appropriate notice.

Contact Information

RoofHyve Inc.

Legal Mailing Address: 2146 Pine St, Redding, CA 96001

Legal Notices: legal@roofhyve.com

Security: security@roofhyve.com

Privacy Requests: privacy@roofhyve.com

Support: support@roofhyve.com