Privacy Policy

Google User Data Collection

Specific Google User Data We Collect: When you authenticate with Google OAuth, we collect the following Google user data with your explicit consent:

• Email Address: Your Google account email address for authentication
• Profile Name: Your Google profile display name
• Profile Picture: Your Google profile picture/avatar
• Google Business Profile Data (only if a business owner connects it from their dashboard, which asks Google for permission to manage your business profiles): the business locations your Google account manages (name, address, phone number, website, opening hours, Google’s verification status and Google Maps link), and, for the one location you connect, its average star rating and number of reviews. We do not collect or store the text of reviews, and we never change anything on your Google Business Profile.

Data Collection Method: We only collect this data through official Google OAuth 2.0 authentication flow when you explicitly grant permission.

Quote Requests

When you send a quote request from a contractor's profile, we store your name, phone number, email address, the description of your project, the page you sent it from, the IP address it came from, the date and time, and the version of the consent sentence shown beside the button. We pass the request and your contact details to a roofing contractor so they can contact you about your project by phone or email. They may also text you only if you tick the optional text-message box on the form, and we record whether you ticked it and the wording beside it. If the business on that page has verified its listing with us, the request goes to that business; if it has not, it goes to a verified roofing contractor who serves your area, or, if none is nearby, to the business on that page. The form says so before you send it.

Storm Watch Newsletter

If you subscribe to the Storm Watch weekly storm digest, we store your email address, the states you chose, and a record of your consent: the date and time, the IP address the signup came from, the page you signed up on, and the exact wording you agreed to. We keep that record so we can show that the subscription was asked for. Nobody is added to this list any other way — you must click a link in a confirmation email before anything is sent, and no address from our contractor listings is ever added to it.

Every digest carries a one-click unsubscribe link at the bottom, which works with no login and no explanation. Unsubscribing stops all further digests; we keep the row marked as unsubscribed so that the request is not undone by a later import.

Text Messages (SMS)

National Roofing Directory may send a text message to the business phone number shown on a roofing company's own listing in our directory, or given to us when the business claimed that listing. We text a business for one purpose: to tell it about something that happened on its own listing, such as a homeowner's quote request, and what it can do about its listing. A business that has not asked us for texts receives at most one such notice. A business that agreed to text alerts when it claimed its listing may receive lead alerts, at a frequency that depends on how many requests its listing receives.

• Every message names National Roofing Directory and ends with “Reply STOP to opt out.”
• To stop: reply STOP (or UNSUBSCRIBE, CANCEL, END or QUIT). We stop at once, permanently, and keep a record that you asked so that no later import or update can undo it. Reply START to receive messages again.
• For help: reply HELP, or use our contact form.
• We text only between 8 AM and 9 PM in your local time, and never more than once a day to the same number.
• Message and data rates may apply.

We never sell, rent or share phone numbers, or your text-messaging consent, with anyone for their marketing. We record each message we send and each reply we receive (the number, the text, the date and time) to honour opt-outs and to show what was sent. Our text-messaging provider receives the number and the message only to deliver it. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are excluded from every category of sharing described in this policy and will not be shared with any third parties. Full program terms: our Terms of Service.

Business Information

For roofing contractors who verify their businesses:

• Business name and address
• Contact information (phone, website)
• Business hours
• Whether the business has connected its Google Business Profile, and when

Usage Data

• Pages visited and time spent on our site
• Browser type and version
• IP address (anonymized)
• Referral source

Google User Data Protection

Specific protections for Google user data include:

• Encryption: All Google user data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
• Access Controls: Strict role-based access controls limit who can access Google user data
• Secure Infrastructure: Data is stored with Cloudflare (database and file storage). The Google access for a connected Business Profile is additionally encrypted with a key that only our servers hold
• Regular Security Audits: Ongoing security assessments and vulnerability testing
• No Data Mining: Google user data is never used for analytics, profiling, or data mining

We Do NOT Share Google User Data For:

• Selling to third parties or data brokers
• Advertising or marketing purposes
• Creating user profiles for external parties
• Training machine learning or AI models
• Credit decisions or financial assessments

Limited Sharing Only When:

• Legal Compliance: Required by law, court order, or government request
• Safety & Security: To protect users' safety or prevent fraud/abuse
• Service Providers: With trusted service providers who help operate our platform (under strict data protection agreements)
• Business Transfer: In connection with a merger or acquisition (with continued privacy protection)