Privacy Policy

Good Roof Worx, Inc. 

Effective date: May 1, 2025

This Privacy Policy explains how Good Roof Worx (“Good Roof Worx,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with our website, estimates and proposals, roofing services, and payment processing (including payments handled through Stripe). If you have questions, contact us at office@goodroofworx.com.

Plain-English summary: We collect only the information necessary to identify you, provide estimates, perform work, invoice you, process payments, and fulfill our legal obligations. We do not sell personal information. We use the payer's name and physical address solely to verify ownership and correctly match payments to the corresponding job.

1) Information We Collect

• Identifiers & Contact Details: name, email, phone number, billing and service addresses.
• Customer & Transaction Records: estimates, proposals, work orders,      invoices, payment confirmations, limited payment metadata (e.g., payment method type, last 4 digits), and account notes.
• Payment Details (via Stripe): We do not store full card/bank details on our systems. Stripe collects and processes payment credentials directly; we receive only the information needed for reconciliation.
• Website & Device Data (typical): IP address, pages viewed, and similar analytics/cookie data (if analytics are enabled).
• Communications: Emails, texts, calls, forms, photos, or files you share (e.g., roof photos for estimates).

2) How We Use Personal Information

• To provide services: create estimates, schedule jobs, deliver materials,      perform roofing services, and provide customer support.
• Payment verification & reconciliation: We request the payer’s name and physical address solely to verify ownership and correctly match each payment to the corresponding estimate, contract, or invoice. This      prevents fraud and helps resolve billing disputes.
• Business operations: accounting, auditing, tax, regulatory compliance, and recordkeeping.
• Security and fraud prevention: detect, investigate, and prevent fraud, abuse,      or security incidents.
• Website operation and improvements: operate our site, troubleshoot, and (if enabled) measure performance.

We do not use the payer's name or address collected for payment verification for marketing or resale purposes.

3) How We Share Information

We share personal information only with:

• Service      Providers/Processors: payment processing (e.g., Stripe),      invoicing/accounting (e.g., QuickBooks), estimating/proposal tools (e.g.,      Roofr), customer communication and form providers, cloud hosting, and      IT/security vendors. They may only use the data to perform services for us.
• Professional/Legal:     auditors, insurers, legal counsel, and regulators when required by law or to protect rights and safety.
• Business transfers: if we undergo a merger, acquisition, or asset sale, your information may be transferred as permitted by law.

We do not sell or share personal information for cross-context behavioral advertising.

4) Payments and Stripe

When you pay online, your payment information is processed by Stripe. Stripe collects your card/bank details directly and provides us with the limited information needed for payment confirmation and reconciliation (e.g., payment status, method type, and the last 4 digits). Stripe’s handling of your data is governed by its own privacy policy available on Stripe’s website.
Why we request payer name & address: to verify the authorized payer’s identity and ensure the payment is matched to the correct customer account, estimate, or invoice.

5) Cookies & Analytics

We may use cookies and similar technologies to run the website, maintain security, and (if enabled) understand site usage. You can manage cookies through your browser settings. If we enable third-party analytics in the future, those providers will act as our processors for the purpose of measurement.

6) Data Retention

We keep personal information only as long as needed for the purposes described above or as required by law:

• Invoices,      payments, and accounting records: typically 7 years (tax/audit requirements).
• Job files & customer communications: generally up to 7 years from project completion (or longer if legally required).
• Website inquiries/leads: Typically, 24 months unless you request us to delete them sooner.

7) Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including limiting access to authorized personnel, encrypting data in transit, and partnering with reputable service providers (e.g., PCI-compliant payment processors). No method of transmission or storage is 100% secure.

8) Your Choices & Rights

• Access/Correction/Deletion:     You may request access to, correction of, or deletion of your personal information, subject to legal retention obligations (e.g., invoices we must keep for tax).
• Marketing: If we send marketing communications, you can opt out at any time (we do not use payment verification data for marketing purposes).
• California residents (CCPA/CPRA): You have the right to know the categories of personal information we collect, the sources, purposes, and disclosures;      to request access, correction, or deletion; to opt out of sale or sharing      (we do not sell or share); and to limit use of sensitive information (we do not use sensitive information for additional purposes). You will not be discriminated against for exercising your rights. To exercise rights,      contact [your email here] or [your mailing address here] and      note “Privacy Request.”

Notice at Collection (California):
We collect: identifiers (name, contact info, addresses), customer records (estimates/invoices), commercial information (services purchased), internet activity (site usage), and limited payment metadata.
Purposes: provide services, verify and reconcile payments, security/fraud prevention, compliance, and website operation.  Retention: see Section 6.  Sale/Sharing: none.

9) Children’s Privacy

Our services are intended for adults. We do not knowingly collect personal information from children under 13 (or under 16 in California) without appropriate consent.

10) International Users

Our operations are U.S.-based. If you access our site from outside the U.S., your information may be processed in the U.S., where laws may differ from those in your country.

11) Changes to This Policy

We reserve the right to update this Policy from time to time. The “Effective date” above shows when it was last revised. Material changes will be posted on our website.

12) How to Contact Us

Good Roof Worx
Email: office@goodroofworx.com
Phone: 1-800-896-6107
Mailing Address: 333 University Avenue, Suite 200, Sacramento, CA 95825