Privacy Policy

Who we are. Freedom Roofing LLC d/b/a Froof ("Froof," "we," "us," or "our") provides residential and commercial roofing services. This Privacy Policy explains how we collect, use, disclose, and protect personal information in the United States in connection with our websites (including https://www.froof.com and https://app.froof.com, and any future domains), SMS/texting programs, forms, emails, and offline interactions (collectively, the "Services"). The Services also include the Froof web app and, when you use it, the Froof mobile app for iPhone, and this Policy applies both to our customers and to the staff, sales representatives, crews and partners who use the Services to work with us.

This Privacy Policy is written for a U.S. audience and is intended to satisfy applicable federal requirements and common state privacy obligations. It is not legal advice.

1) Personal information we collect

We collect information that identifies, relates to, or could reasonably be linked with you or your household ("personal information"). The categories we collect may include:

• Identifiers & contact info: name, email, phone number, address, and similar identifiers.
• Project details: service address, roof type/age, photos/videos you upload, preferred materials, financing interest, insurance claim details you provide.
• Commercial & transaction data: records of services requested or purchased, estimates and invoices, appointment dates, communications.
• Internet / device data: IP address, device and browser type, pages viewed, referring pages/links, and interactions with our site; approximate location derived from IP.
• Communications content: messages and calls with our team (we may record or transcribe calls/messages for quality and training where permitted by law, and we will provide notice where required).
• Job applicant or contractor data (if you apply to work with us): resume/CV data, work history, licensing and certifications, background screening results (where permitted and with required notices/authorizations).

Sources. We collect personal information directly from you (online forms, calls, texts, email), automatically from your device (cookies and similar technologies), from service providers (analytics, scheduling, payments), from publicly available sources (property records), and from partners you direct us to work with (financing providers, insurers, adjusters).

2) How we use personal information

We use personal information to:

• Provide, price, schedule, and complete roofing inspections and services;
• Communicate with you, including via SMS/text, phone, and email;
• Verify addresses, assess roof/project needs, and prepare estimates;
• Process payments and manage financing referrals at your request;
• Operate and improve our websites and Services (including analytics and security);
• Market our services, including interest-based advertising (where permitted);
• Comply with law, prevent fraud, protect our rights, and respond to legal requests.

We may aggregate or de-identify personal information for analytics and service improvement. We do not attempt to re-identify de-identified data.

3) Cookies, analytics, and advertising

We and our service providers use cookies, pixels, SDKs, and similar technologies to operate the site, measure traffic and usage, and understand campaign performance. Where required by law, we will present controls to manage non-essential cookies/trackers. You can usually set your browser to refuse or delete cookies, though some site features may not function.

If we use advertising or analytics tools that involve cross-site tracking (for example, Google Analytics or ad platforms), we will disclose this and offer applicable opt-outs.

Meta Pixel: Our public marketing pages use the Meta Pixel to measure visits and giveaway or form sign-ups from Meta (Facebook and Instagram) ads. It does not run on customer account pages or on links we send you. It is not loaded when your browser sends a Global Privacy Control signal, and you can manage ad preferences in your Meta account settings.

4) SMS/Text messaging program (consent & opt-out)

If you provide your mobile number, you may receive SMS/text messages from Froof (for example, to confirm appointments, send estimates, or, with your consent, send promotions). Message frequency varies. Message & data rates may apply. Reply STOP to end and HELP for help. We will not require your consent to receive marketing texts as a condition of purchasing any goods or services. We do not buy, sell, or share your opt-in consent with third parties for their own texting programs. Carriers are not liable for delayed or undelivered messages.

Text messaging originator opt in data and consent will not be shared with any third parties.

5) Email marketing (CAN-SPAM)

If you receive marketing emails from us, you can unsubscribe at any time using the link in the email. We include our mailing address and an easy way to opt out in each marketing email. We may still send you non-marketing emails (e.g., about your project or account).

6) How we disclose personal information

We disclose personal information as follows:

• Service providers/contractors that help us operate the Services (hosting, analytics, communications, payments, scheduling, delivery).
• Financing and insurance partners when you ask us to assist with financing or claims (we share only what's necessary to facilitate your request; partners handle your data under their own policies).
• Business transfers (e.g., merger, acquisition, or asset sale).
• Legal and safety purposes (compliance with law, responding to lawful requests, enforcing terms, protecting rights or safety, and preventing fraud).

We do not sell your personal information for money. If we engage in cross-context behavioral advertising ("sharing" under some state laws), we will provide a "Do Not Sell or Share My Personal Information" mechanism as required.

Section 18 lists the service providers that process personal information for us and what each one does.

7) Your privacy choices and U.S. state rights

Depending on your state, you may have the right to access, correct, or delete certain personal information; to opt out of targeted advertising, the "sale" or "sharing" of personal information, or certain profiling; and to limit the use of sensitive personal information. You won't be discriminated against for exercising these rights.

How to exercise your rights/choices:

• Email us at support@froof.com with the subject line "Privacy Request" and tell us what you're requesting.
• Call us at (508) 425-4736.
• If available on our site, use the "Privacy Choices" or "Do Not Sell or Share My Personal Information" link.
• To delete your Froof account, use Delete account on your profile on our website or in the Froof iPhone app if you use it, or email us; section 16 explains how.

We will verify your request using information we already have about you. You may use an authorized agent where permitted by law. If we deny your request, you may have the right to appeal by replying to our decision; instructions will be provided in our response.

Global Privacy Control (GPC): If our site recognizes browser-based opt-out signals like GPC, we will treat them as a valid opt-out where required.

8) Retention

We keep personal information for as long as needed to provide Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and purpose. When no longer needed, we delete or de-identify the information.

Section 17 lists how long we keep account, chat and business records, and section 16 explains what happens to them when you delete your account.

9) Security

We use reasonable and appropriate administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10) Children's privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us and we will take appropriate steps to delete it.

11) Third-party sites and services

Our site may link to third-party websites or services (for example, financing portals, mapping, or review platforms). Those sites are governed by their own privacy policies. We are not responsible for their practices.

12) Changes to this Policy

We may update this Privacy Policy from time to time. The "Effective date" above shows when it was last updated. If we make material changes, we will provide notice as required (for example, by posting a notice on our site or contacting you).

13) How to contact us

Questions or concerns about this Policy or our practices?

14) The Froof app and Froof accounts

Who has an account. Homeowners can create an account on our website, and we create one for you when we send you a contract or start your job. Staff, crews and partners have accounts that we set up for them. Sales representatives can request an account on our website; we approve it before it can be used.

What we collect for an account. Your name, email address, phone number, a password (we store only a one-way hash of it), an optional profile photo, your role or roles and your organization, and your settings, such as your chat language, notification quiet hours and do-not-disturb. We also record when you confirmed your email address or phone number and when you last signed in.

Your organization's directory. If your account belongs to an organization, Froof sales representatives in it and the people in it who can start Froof Chat direct conversations can search its active accounts by name and see each account's name, email address, phone number, role and profile photo.

Work records. If you work with us, we keep the records of that work: the leads, jobs, claims and site visits assigned to you, the notes you write on them, and the changes you make to records, with your account and the time. We keep the commissions, incentives and payouts owed and paid to you, and how they were paid. If we pay you through Stripe, Stripe collects the identity, bank and tax details it needs under its own privacy policy; we store your Stripe account id and its onboarding and payout status. We do not store Social Security or tax identification numbers in our systems.

Location at work. Some web tools use the location your browser reports, only after you allow it: site-survey routes record your location during the day, a meeting check-in records where you checked in, and drive-time estimates send your location to our maps provider. If you do site surveys, we also keep the home base your routes start from.

On your iPhone. If you use the Froof iPhone app, it keeps its sign-in tokens in the iPhone's secure storage (the Keychain). Our servers never store those tokens: we keep a one-way hash of the long-lived sign-in token and the device description your phone sends when you sign in. The app reads your photo library or files only when you choose a photo or file to attach. The app does not use advertising identifiers, does not track you across other companies' apps or websites, contains no third-party analytics or advertising code, and does not collect your location. Each time it starts, the app asks Expo, our app-update service, whether a newer version is available. When you open a page of our website from the app, the app gets a one-time code for that page from our servers: we store only a one-way hash of the code, with your account and the page, and the code works once, within 60 seconds. The website shows which account the code belongs to and signs you in only after you choose Continue, and that website sign-in ends when you sign out of the app.

Notifications. If you turn on notifications, we store the push address your browser or iPhone gives us, with a description of the device, so we can send you message and work alerts. For the iPhone app this is an Apple push token and an encryption key your phone creates for that sign-in. We delete it when you turn notifications off, when you sign out on that device, and when your account loses access.

What Apple can see. Before we send an iPhone notification, our servers encrypt its content with your phone's key. Only your phone and our servers hold that key, so Apple, which delivers the notification, cannot read it. Apple sees your device's push token, the app's badge count, an internal account number with no personal details, and a fixed text ("Froof - New notification") that your phone shows only if it cannot decrypt the notification. Once decrypted, your lock screen may show the sender and a short preview, depending on your iPhone's notification settings. Browser notifications are delivered by your browser's push service.

15) Froof Chat

Froof Chat carries messages between our staff, sales representatives, crews, partners and customers.

What we store. The messages you send; the photos, files and voice notes you attach; your @mentions, reactions and saved messages; which messages you have read; and the rooms you belong to. Attachments are stored in our cloud storage (Amazon S3).

Who can see it. In the app, a direct conversation or private group can be read only by its members. Open channels can be found and read by our employees. Rooms tied to a customer record (a lead, job or claim) can be read by the people assigned to that record and by our employees who oversee all records. We can access chat content stored on our systems when needed to operate and secure the Services or to comply with the law.

Edits and deletions. When you edit a message, we keep its earlier versions. When you delete a message, we remove its text, translations and attachments from every version, including earlier edits, and other members see "Message deleted" in its place. The people who review chat reports can delete a reported message in the same way. If a message was reported, the report keeps its own copy, as described below.

Chat rules. Before you use Froof Chat, you must accept the Froof Chat rules (section 10 of our Terms of Service). We record the version you accepted, when you accepted it, whether you did so on the website or in the app, and the language you read it in. If the rules change in a material way, we ask you to accept them again.

Blocked words. Froof Chat refuses a message, room name or topic that contains a word on our blocked list. A refused message is not sent and not stored.

Reports. You can report a message or a person. A report stores who filed it, who it is about, the reason, any note the reporter adds, and a copy of the reported message's text and attachments as they were when it was reported. The people who review reports (our admins and staff we give that permission) see the report, that copy and who filed it. The person reported never sees the report. The report stops keeping the attachments once it is reviewed; the copy of the text stays with the report until the reported person's account is deleted. A reviewer can delete the reported message and can take away the chat access of the person who posted it.

Translation. In rooms tied to a customer record where a member reads chat in Spanish, we send message text to Google Cloud Translation to show it in English or Spanish, and store the translation with the message.

Blocks. You can block a person. We store who blocked whom and when. The people who review reports can see who has blocked whom.

AI features. We send some content to AI models through our AI provider, OpenRouter, which passes it to the model's maker (for example, OpenAI): when you open your chat Inbox, its latest messages, to write a short summary for you; and when you ask for a voice note to be turned into text, that voice note. Our staff tools also send job and property photos to AI models to sort them and to create roof previews, and insurance estimate documents to draft scopes of work.

16) Deleting your account

How to ask. On our website, open your profile and choose Delete account under Security (homeowners also reach it from the link at the bottom of their dashboard, and partners from the account page of the partner portal). If you use the Froof iPhone app, open Profile and choose Delete account. To confirm it is you, we send a code to an email address or phone number you have already verified. You can also email support@froof.com from the email address on your account with the subject "Delete my account"; we confirm the request is yours before we file it for you.

What happens next. As soon as the request is made, you are signed out on every device and cannot sign in, your notifications stop, and your scheduled chat messages are cancelled. The account is deleted on or shortly after the 7th day after the request. If you asked in the app or on the website, our staff can complete the deletion sooner; a request we file for you from an email always waits the 7 days. We email you when the deletion is scheduled, if it is cancelled, and when it is done. There is no undo in the app: to keep your account, email support@froof.com before the deletion date. After the deletion it cannot be undone.

Marketing opt-out. A deletion request also opts you out of our marketing texts and emails, for the phone numbers and email addresses on your account and on your customer records. We keep that opt-out as a one-way keyed hash of each phone number and email address, not the address itself, so we can keep honoring it if your details reach us again, and we keep it for at least 5 years. The opt-out stays even if the deletion is cancelled. It ends only if you opt back in yourself: by texting START, UNSTOP or ROOF to our marketing number, or by subscribing again from the unsubscribe page in one of our emails. We may still text or email you about a project you have with us.

What we delete. Your password, sign-in tokens and notification addresses; your phone number, profile photo, location records and settings; your reactions, saved messages and scheduled messages; your membership in chat channels; your acceptance of the Froof Chat rules and the blocks you made or that others made of you; and the content of every chat message you sent (text, translations, photos, files and voice notes), including earlier versions and the copies kept in reports about you. Your name and email address on the account are replaced by "Deleted user". Other members see "Deleted user" and "Message deleted" in their place; direct conversations stay visible to the other person, with your messages removed. An attached file is kept only while another record still uses the same file.

What we keep, and why. Some records are not yours alone: they are our business, tax and legal records. We keep them, with your account shown as "Deleted user" except where the record itself needs your name:

• Payments, payouts, commissions and incentives owed or paid to you, and the name they were paid to (tax and accounting records). Commissions and payouts you have already earned are still paid under your agreement.
• Invoices, payments and contracts, including electronic signature records: signer name, email address, IP address and time (contract and tax records).
• Notes, photos, texts, tasks and history that you wrote or changed on customer projects, claims and jobs.
• Chat reports you filed, shown as filed by "Deleted user".
• If you are a homeowner, your customer record and its projects, with the property address. If you have business on file with us (a contract, signed or still open, an invoice, a payment or an order), or new work with us started after your request, your name, phone number and email address stay on those records. If you have none, we remove your name, phone number, email address and any extra contacts from your customer record, its change history and our records of marketing messages sent to it, and it shows as "Deleted customer".
• Your text-message and email consent and opt-out records, including the phone number, IP address and browser details recorded when you gave consent, so we can show what you agreed to and keep honoring an opt-out.

If we paid you through Stripe, your Stripe account is held by Stripe under its own policy; deleting your Froof account does not delete it. Section 17 says how long we keep these records.

17) How long we keep information

We keep information for at least the periods below. We do not yet delete records automatically when a period ends.

• Account details and notification addresses: until the account is deleted. Sign-in tokens expire sooner.
• Chat messages and attachments: until the sender deletes them or deletes their account, or a report reviewer deletes them.
• Froof Chat rules acceptance and blocks: until the account is deleted (a block also ends when the person who made it removes it).
• Chat reports: as long as the report; the copy of the reported message's text until the reported person's account is deleted, and its attachments until the report is reviewed.
• Payout, commission and incentive records: 7 years after the end of the tax year of payment.
• Invoices and payment records: 7 years after final payment or project completion.
• Contracts and signature records: 7 years after project completion, or until the written warranty ends if that is later.
• Notes and history on projects, claims and jobs: as long as the project, claim or job record.
• Text and email consent and opt-out records: 5 years after the later of the request and the last message we sent.
• Marketing opt-outs from an account deletion: 5 years, stored only as a one-way keyed hash.