Privacy

RoofParrot is run by Anurag M, a sole individual seller based in India. For data protection purposes the controller is TODO: the controller’s legal name and postal address, matching the terms page.

Any question about this page, or a request to see or delete what little there is, goes to support@roofparrot.com.

The arithmetic runs in your browser. Footprint, pitch, edge lengths, waste allowance, material costs, labour rates, overhead and margin are held in the page while you use it, and none of it is sent anywhere to produce the answer on screen. That is a property of how the site is built rather than a promise about our intentions — it is the same reason a takeoff still works on a roof with no signal.

Four things on this site can reach our server, and each has its own section below: your email address and code, when you sign in; a licence key, when you ask us to check it; the six analytics events; and a saved job, when you press save. No calculator sends anything at all, and neither does the estimate or the photo report.

We record how the tools are used, because without it there is no way to know which calculator is worth improving. Six events exist and no others can be added without a code change. Each event declares the fields it is allowed to carry, and the emitter drops any field the event does not declare before anything is sent — so a tool cannot leak a customer’s address into analytics even by accident.

None of those fields is a name, an email address, a phone number, a job address, a measurement, a price or an identifier that follows you between visits. There is no analytics cookie and no device fingerprint.

The events are posted to an endpoint on this site’s own domain, not to a vendor’s script. Which analytics tool sits behind that endpoint is still an open decision: TODO: name the analytics processor and where it stores data, once chosen, and link its own privacy terms. Until then the events are written to a file on our own server.

Every tool on this site is behind a sign-in. You give an email address and a code; the address is the only thing we keep, and we keep it because your saved work belongs to it. There is no password, so there is none to lose, and we never ask for a name, a company or a phone number.

A successful sign-in sets one cookie, rp_session. It is signed by us, it holds your address and the dates it was issued and expires, and nothing else — no tier, no licence, no tracking identifier. It lasts thirty days, it is not readable by scripts on the page, and it is not shared with anybody. Signing out, or clearing site data, removes it.

When you enter a licence key on the unlock page, that key is sent to our server, which asks Dodo Payments whether it is active and then looks up which tier it bought. The verdict comes back; the key does not travel anywhere else.

The verdict is then stored in your browser so the paid tools keep working offline and on a bad signal. Two things are kept in your browser’s local storage, and nowhere else:

• Your licence verdict — the tier, the key and when it was last checked. Removed by “sign out of this licence” on the unlock page, or by clearing site data.
• Your colour theme — whether you chose light, dark or automatic.

Neither is a tracking cookie, neither is read by anyone else, and neither is sent to us except the key when you ask us to check it.

The estimate PDF and the insurance photo report are assembled by your own browser. Your business details, your customer’s name, the job address, the priced lines, your terms, your logo, and every photograph of the roof and its caption stay on the machine you typed them on. None of it is uploaded.

For the photo report that is the part worth knowing. A supplement runs to dozens of photographs of somebody’s damaged house, and the honest answer to “what do you do with those?” is that we never receive them. There is no bucket of claim photographs here to leak, subpoena or be asked about, because the report is built where the photographs already are.

It is also why both work with no signal, and why neither gets slower as the file gets bigger: there is no upload to wait for.

Saving is the one place we deliberately keep what you typed, because the job still being there tomorrow is the point of it. A saved job holds the document itself, your customer’s name, the job number and the total, so the list can be shown to you and the job reopened on any device you sign in on.

A saved job belongs to the address you signed in with, and that address forms part of every lookup rather than being checked afterwards — so an id on its own can never reach another contractor’s customer. How many jobs you may keep live depends on your tier; who they belong to does not. Delete a job and its record goes. Ask at support@roofparrot.com and all of them go.

Nothing is saved unless you press save. A calculator on its own writes nothing down and never asks.

If you put your address in the box at the foot of a calculator, we keep three things: the address itself, which calculator the box was on, and the date you ticked it. The second one is there so we know which tool is worth writing about next; it is not used to work out anything about you.

We do not have your name, because we never ask for it. The address is not matched against a licence, a saved job or an analytics event, and the six events on this page carry no email address — by design, and enforced in the code rather than promised here.

Nothing is sent to that address except the weekly email. Not a sales sequence, not a reminder that you used a calculator, and nothing from anybody else — the list is never sold, rented or shared. Reply to any of them, or write to support@roofparrot.com, and it comes off the list for good.

You can ask what we hold for your address and have it deleted, at any time, without giving a reason. See section 11.

Dodo Payments is the merchant of record. They take the payment, so your card details, your billing address and the email address you buy under are given to them, processed under their terms, and used by them to issue your receipt, handle tax and produce your licence key. We never see or store a card number.

What reaches us from a purchase is the licence key, the tier it bought, its expiry where it has one, and the email address needed to contact you about that licence — for example to send a renewal notice, or to answer a support message. That is kept for as long as the licence is live and for as long afterwards as tax records require. Dodo’s own privacy terms govern what they hold: TODO: link Dodo Payments’ privacy policy and confirm the data-processing position for an India-based seller with US customers.

Loading any page on the internet reveals your IP address and browser user-agent to whoever serves it, and this site is no exception. Those appear in ordinary web-server request logs, are used only to keep the site running and to investigate abuse, and are not joined to the analytics events or to your licence.

Hosting and log retention: TODO: name the hosting provider and region, and state how long request logs are kept.

No advertising network, no retargeting pixel, no session recording, no heatmap tool, no social media embed and no third-party font or script that would see your visit. No selling or sharing of data, because there is nothing worth selling. No email marketing to an address you did not give us for that purpose.

Outbound links to manufacturer spec sheets and source documents go to other companies’ sites, which have their own privacy terms. We do not control them, and we get nothing back when you follow one.

You can ask what is held about you, ask for it to be corrected, ask for it to be deleted, and ask for a copy of it. Write to support@roofparrot.com. For a free account it is the email address you sign in with, and whatever you have chosen to save under it. For a paying licence holder it is that plus a licence key, a tier and an expiry, and it can be deleted once the licence has ended and any tax retention period has passed. A payment record held by Dodo must be requested from Dodo.

Which supervisory authority you may complain to depends on where you live: TODO: name the applicable data protection authority or authorities once the jurisdiction on the terms page is settled.

This is a tool for roofing contractors and homeowners planning work. It is not directed at children, and we do not knowingly collect anything from anyone under 16.

If this page changes, the date at the top changes with it. A change that affects what is collected from a paying licence holder will be sent to the email address on the purchase before it takes effect.