Legal

Privacy policy.

Draft — last updated August 29, 2026 · to be reviewed by counsel before checkout opens

This policy explains what Roofaio ("we," "us") collects when you use the roofaio.com website (the "Site") and the Roofaio desktop application (the "App"), and what we do with it. The short version, which the detail below will not contradict: your plan sets, projects, prices, and margins stay on your machine. Roofaio is a desktop app — project files live locally as portable .rooftk files, and we never receive them.

1. What stays on your machine

Everything you draw, measure, price, and produce in the App — plan sets, project files, your price library, formulas, margins, BOMs, estimates, and proposals — is stored locally on your computer. We have no server copy, no sync service, and no way to read your projects. If you delete a project locally, it is gone; we cannot recover it. Back it up the way you back up anything else that matters.

2. What we collect

• Account and licensing. When you subscribe, we store your name, company, work email, and a license record (your Roofaio ID, subscription status, and machine activation identifiers). The App contacts our license server periodically to validate the subscription; these check-ins transmit your Roofaio ID and app version — never project content.
• Payment. Payments are processed by Stripe. Stripe collects your card details directly; we receive only a customer reference, the card's last four digits, and billing status. We never see or store your full card number. Stripe's own privacy policy governs its handling of your payment data.
• Website. The Site does not use advertising trackers or third-party analytics cookies. Like any web server, ours logs routine request data (IP address, browser type, pages visited) for security and reliability; these logs are retained for a limited period and not sold or shared for marketing.
• Correspondence. If you email us or submit the feature suggestion form, we keep that correspondence so we can respond and follow up.

3. The AI assistant and Anthropic

The optional assistant signs in with your Claude subscription, using your own Anthropic account. When you direct the assistant at a drawing, images of those drawing pages are sent directly from your machine to Anthropic; this traffic does not pass through our servers, and we do not receive or retain it. Your price library, formulas, and margins are never sent to Anthropic or to us. Your use of Claude is governed by Anthropic's privacy policy and terms. If you never enable the assistant, nothing of yours is sent to Anthropic at all.

4. How we use information

• Provide and bill the subscription, and validate licenses.
• Respond to support requests and feature suggestions.
• Send service notices (trial expiry, billing receipts, material changes to terms or this policy). We do not send marketing email without your consent.
• Protect the Service (fraud prevention, abuse investigation, security).

5. What we never do

• We never sell your personal information.
• We never receive, copy, or mine your project files, plans, or prices.
• We never share data with advertisers or data brokers.

6. Sharing

We share personal information only with the service providers needed to run the Service — Stripe (payments), our hosting and email providers (site delivery, transactional email), and Anthropic only in the sense described above, where you initiate the connection with your own account. We may also disclose information if required by law or to protect our rights and users.

7. Retention

Account and license records are kept while they are needed to provide the Service. When deletion of one identity is validly completed, that identity's personal profile fields and active credentials are removed or irreversibly anonymized. Closing one customer organization anonymizes the personal data used only for that organization, but it does not erase an identity, device, or credential that remains legitimately required for a different organization or entitlement. We retain only the minimized records that are still needed for accounting, fraud prevention, security, legal duties, and an auditable record of the request. Stripe keeps payment, invoice, and tax records under its own legal and accounting obligations; we do not copy full payment-card data into Roofaio.

Routine authentication, licensing, provider-delivery, and server records follow documented limited retention schedules rather than becoming a permanent copy of account details. A record may be held longer when it is needed for a documented security incident, dispute, or legal duty. Correspondence is kept only as long as needed to handle the request and related obligations.

8. Your choices and rights

You may request access to, correction of, or deletion of the personal information we hold about you by emailing roofaio.support@gmail.com. Removing one person's identity from a company account does not silently cancel the company's subscription or remove other members. Closing the entire customer account is a separate request: we confirm the requested subscription timing and access effect before carrying it out. Any refund is also a separate decision and is never inferred from a deletion or cancellation request.

Completed identity deletion revokes that person's Roofaio sessions, devices, pending invitations, and unused access credentials, then anonymizes their personal account fields subject to the minimized retention described above. Because Roofaio project files stay on your computers, these account operations do not delete local project files. Depending on your jurisdiction (for example, the EEA/UK or California), you may have additional statutory rights — contact us and we will honor them.

9. Security

Because project data never leaves your machine, the largest part of your risk surface stays under your control. For what we do hold, we use encryption in transit, access controls, and minimal collection by design. No method of transmission or storage is perfectly secure; if we ever become aware of a breach affecting your personal information, we will notify you as the law requires.

10. Children

The Service is a professional tool and is not directed at children under 16. We do not knowingly collect their data.

11. Changes

If we change this policy, we will post the revised version here with a new date and, for material changes, notify active subscribers by email. The core promise — your plan sets, projects, prices, and margins stay on your machine — is architectural and will not change.

12. Contact

Privacy questions or requests: roofaio.support@gmail.com.