What we do with your data.

RoofPO is built so a roofing company can run its job paperwork without handing data to a third party that resells it. We collect what's needed to make the product work — job records, photos, customer phone/email, SMS history — and nothing else. We don't sell your data, we don't use it for advertising, and you can export or delete it any time.

• Account data — your name, email, phone, company name. Provided by you at signup.
• Job data — POs, customer last name, address, phone, email, status, photos, receipts, notes. Entered by you and your crew.
• SMS history — messages sent and received through the app, with phone numbers, timestamps, and Twilio cost data so we can bill correctly.
• Billing data — your subscription tier, payment method last-four (held by Stripe, not us), invoice history.
• Operational logs — request timestamps, IP addresses, and error reports for debugging and abuse prevention.

• We don't sell or rent your data to anyone.
• We don't use it to train models that aren't your private app.
• We don't show ads, run trackers from ad networks, or share data with data brokers.
• We don't read your photos for any purpose other than serving them back to you.

To run the service we use:

• Stripe — payment processing. Card data goes directly to Stripe; we never see it.
• Twilio — SMS delivery. Phone numbers and message body are sent to Twilio when you send a text.
• DigitalOcean — hosts the application and database.

Each of these has their own privacy policy. We share with them only what's required to deliver their part of the service.

If you're a homeowner and you got a share-link text from a roofer using RoofPO, your data is held by that roofer's account, not by RoofPO directly. To delete or correct it, contact the roofing company. We'll help them comply if they reach out to us.

• Export — pull your full job history out as spreadsheet, any time.
• Delete — close your account and we permanently remove your data within 30 days.
• Question — email hello@roofpo.com and we'll respond within 5 business days.

If we change this policy in a way that meaningfully affects what we collect or how we use it, we'll email every active customer. Cosmetic changes (typos, structure) won't trigger an email.