Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you register for or use the Platform as a Client, we collect:

• Account registration information: business name, owner/authorized user name, email address, phone number, mailing address, roofing contractor license information, and the Richards Building Supply branch or state through which you enrolled (where applicable)
• Payment information: billing address and payment method details (processed through our third-party payment processor; we do not store full payment card numbers)
• Subscription and billing records: selected subscription tier (Ignite, Burn, or Blaze), activation fee payments, per-appointment fee records, and month-to-month billing history
• Business profile information: annual revenue range, geographic service area, monthly job volume targets, existing website and Google Business Profile status, estimated weekly inbound call volume, and roofing contractor license information
• Communications: messages, support tickets, emails, and other communications you send to us
• Configuration and preferences: system settings, notification preferences, lead-handling rules, and integration configurations

1.2 Information Collected Automatically

When you access the Platform, we automatically collect:

• Device and browser information: IP address, browser type, operating system, device identifiers
• Usage data: pages visited, features used, time and duration of visits, clicks and interactions
• Log data: server logs, error reports, and diagnostic information
• Cookie and tracking data: as described in our Cookie Policy
• Location data: general geographic location derived from IP address

1.3 End User Data Processed on Behalf of Clients

When Clients use the Platform to manage their pipeline and customer communications, the Platform processes personal information of End Users (homeowners and prospective roofing customers) including:

• Contact information: name, phone number(s), email address, property address
• Communication records: call recordings, SMS message content, voicemail recordings, chat transcripts
• Lead and appointment data: inquiry details, service requests, storm damage descriptions, appointment scheduling information
• Property information: property address, roof type, damage assessments, insurance claim information
• Interaction history: follow-up sequences, response times, conversion status

RooferFuel processes End User data as a service provider/data processor on behalf of Clients. Clients are the data controllers with respect to End User data and are responsible for ensuring lawful bases for processing, including obtaining required consents under TCPA and applicable state laws.

1.4 Information from Third Parties

• Integration partners: if you connect the Platform to third-party services (GoHighLevel/LeadConnector, JobNimbus, AccuLynx, Google Local Services Ads, and others), we may receive data from those services consistent with their privacy policies and your authorization
• Richards Building Supply enrollment data: if you were enrolled through a Richards Building Supply branch, we may receive your contact and branch-affiliation information from Richards Building Supply in connection with that distribution relationship
• Publicly available data: business information from public directories, state licensing databases, and similar sources

2. How We Use Information

2.1 To Provide and Operate the Platform

• Processing and routing inbound leads on behalf of Clients
• Delivering AI-powered call answering, SMS follow-up, voicemail response, and appointment booking services
• Managing Client subscription tiers, activation fees, and per-appointment fee billing
• Operating the Platform dashboard, pipeline reports, and performance analytics
• Executing storm-season activation protocols and time-sensitive lead capture campaigns
• Coordinating with Richards Building Supply branches and territory managers where Client has authorized such coordination

2.2 For Account and Relationship Management

• Creating and managing your account
• Processing payments, including recurring subscription fees and per-appointment performance fees
• Sending service notifications, billing statements, and account alerts
• Providing customer support
• Communicating about Platform updates, new features, and service changes

2.3 For Analytics and Improvement

• Analyzing Platform usage and performance to improve features and functionality
• Conducting research to develop new products and services
• Generating aggregated, de-identified industry benchmarks and reports (which do not identify individual clients or end users)
• Training and improving AI models that power the Platform (using de-identified or aggregated data)

2.4 For Marketing and Communications

• Sending marketing communications about the Platform and related services (subject to your opt-out rights)
• Conducting case study development with Client consent
• Providing market insights and performance benchmarks to Clients and, where authorized, to Richards Building Supply

2.5 For Legal and Compliance Purposes

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other agreements
• Protecting the rights, property, and safety of RooferFuel, our Clients, End Users, and others
• Detecting, preventing, and addressing fraud, security incidents, and technical issues

3. TCPA and Automated Communication Compliance

The RooferFuel.ai Platform uses artificial intelligence to conduct automated telephone calls, deliver pre-recorded or artificial voice messages, and send automated SMS/text messages to End Users on behalf of Clients. These activities are subject to the Telephone Consumer Protection Act (TCPA), 47 U.S.C. § 227, and implementing regulations.

3.1 Client Responsibilities

CLIENTS ARE SOLELY RESPONSIBLE for:

• Obtaining prior express written consent from End Users before the Platform makes automated calls or sends automated SMS messages on the Client's behalf, to the extent required by TCPA
• Maintaining records of all required consents
• Honoring all opt-out requests and communicating them to RooferFuel promptly
• Ensuring the Platform is not used to contact individuals on the National Do Not Call Registry without proper authorization
• Complying with all applicable federal and state telemarketing laws, including state-specific requirements in California, Florida, Texas, and other states where Client operates

3.2 RooferFuel Platform Commitments

• The Platform includes opt-out functionality and will honor STOP commands and similar opt-out requests in automated SMS communications
• The Platform provides Client-configurable call and message timing controls to assist compliance
• RooferFuel provides Clients with tools to maintain consent records within the Platform

3.3 Indemnification

Clients agree to indemnify and hold harmless RooferFuel from any claims, damages, fines, or penalties arising from Client's failure to comply with TCPA or other telemarketing laws. See the Terms of Service for complete indemnification provisions.

4. How We Share Information

4.1 With Service Providers

We share information with third-party vendors and service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers
• Payment processing companies
• AI and machine learning infrastructure providers
• Telephony and SMS service providers (including GoHighLevel/LeadConnector)
• Analytics and monitoring services
• Email delivery services
• Customer support platforms

All service providers are contractually required to process information only as directed by RooferFuel and in compliance with this Privacy Policy and applicable law.

4.2 With Integration Partners

If you authorize integrations with third-party platforms (such as GoHighLevel, JobNimbus, AccuLynx, Google, or others), we will share relevant data with those platforms consistent with your authorization and their privacy policies.

4.3 With Richards Building Supply

RooferFuel.ai is distributed exclusively through Richards Building Supply. Where you were enrolled through a Richards Building Supply branch or where you have authorized coordination with Richards Building Supply territory managers, we may share limited Client-account information with Richards Building Supply, including enrollment status, subscription tier, service state, and aggregate performance metrics. We do not share End User contact information with Richards Building Supply. We do not share financial details of your account beyond what is necessary to administer the distribution relationship.

4.4 For Legal Reasons

• In response to a subpoena, court order, or other legal process
• To comply with applicable laws or regulations
• To protect the rights or property of RooferFuel
• To prevent fraud or illegal activity
• In connection with a government investigation

4.5 Business Transfers

If RooferFuel is involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction. We will notify Clients of any such change in ownership or control and describe any choices you may have.

4.6 With Your Consent

We may share information for other purposes with your explicit consent, such as featuring your business as a case study (with your written approval).

4.7 Aggregate and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you, including industry benchmarks, market statistics, and performance data.

5. Data Retention

We retain information for as long as necessary to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements.

Upon account termination, we will delete or de-identify personal information within 90 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or enforcing agreements.

6. Data Security

We implement industry-standard technical, administrative, and physical safeguards to protect information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of data at rest using AES-256 or equivalent
• Access controls and authentication requirements for Platform personnel
• Regular security assessments and penetration testing
• Incident response procedures
• Employee security training

No method of data transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you as required by applicable law.

7. Your Privacy Rights

7.1 Rights for All Users

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention obligations)
• Opt out of marketing communications
• Receive a copy of your information in a portable format

7.2 California Residents (CCPA/CPRA)

California residents have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purpose for collecting it, and the categories of third parties with whom we share it
• Right to Delete: You may request deletion of personal information we collected from you, subject to certain exceptions
• Right to Correct: You may request that we correct inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell personal information as defined by CCPA. We do not share personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: To the extent we process sensitive personal information, you may request that we limit its use
• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights

To exercise California rights, submit a verifiable request by emailing Legal@RooferFuel.ai. We will respond within 45 days (extendable by an additional 45 days with notice).

7.3 Other State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Florida (FDBR), and other states with comprehensive privacy laws have rights similar to those described in Section 7.2. We will honor such rights as required by applicable law. Contact us at Legal@RooferFuel.ai to exercise your rights.

7.4 How to Exercise Your Rights

Submit privacy requests to:

• Email: Legal@RooferFuel.ai
• Mail: RooferFuel.ai, Attn: Privacy Officer, 12460 Crabapple Road, Ste 202-522, Alpharetta, GA 30004

We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies as described in our Cookie Policy, which is incorporated herein by reference. The Cookie Policy is available at RooferFuel.ai/cookie-policy.

9. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will promptly delete such information. If you believe we may have collected information from a child under 18, contact us at Legal@RooferFuel.ai.

10. Third-Party Links and Services

The Platform may contain links to or integrate with third-party websites and services. These third parties operate under their own privacy policies. We are not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party services you access through the Platform.

11. International Data Transfers

RooferFuel is based in the United States, and the Platform is intended for use within the United States. If you access the Platform from outside the United States, your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your jurisdiction. By using the Platform, you consent to such transfer and processing.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify Clients of material changes by posting the updated policy on the Platform and sending email notice to the Client's registered email address at least 30 days before the effective date of changes (except for changes required by law, which may be effective immediately). Continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy.