Privacy Policy
Last updated: September 20, 2026
RoofCast is a tool roofing contractors use in the field. Most of the information in it is not about the contractor using the app — it is about their customers: names, addresses, and signatures on proposals. This policy explains what we hold, why, and who it belongs to.
1. Who we are
RoofCast is operated by RMML FLORIDA LLC, a Florida limited liability company (document number L25000341780), with its principal and mailing address at 3757 S Heron Point, Inverness, FL 34450, United States. In this policy "RoofCast", "we" and "us" mean RMML FLORIDA LLC.
For privacy questions, contact privacy@roofcast.app.
2. Two kinds of people in this policy
The distinction matters, because our obligations differ for each:
- Contractors — the businesses and their sales reps who hold a RoofCast account. For their account data, we are the controller.
- Homeowners — the customers a contractor measures and quotes. We hold their information on the contractor's behalf. The contractor decides what to collect and how long to keep it; we process it under their instruction. A homeowner asking us to access or delete their information will be directed to the contractor who collected it, unless the law requires otherwise.
3. What we collect
Contractor account information
| Data | Why |
|---|---|
| Name, email address, password credentials | To create and secure the account |
| Company name, country, currency, unit system, logo | To brand proposals and price in the right currency |
| Role within the organization (owner, admin, rep) | To control who can change pricing and settings |
| Session records, including IP address and device/browser identifier | To keep you signed in and to detect unauthorized access |
| Subscription status and the store transaction identifier | To verify an active subscription. Card details go to Google or Apple, never to us |
Homeowner information, entered by the contractor
| Data | Why |
|---|---|
| Name, email address, phone number | To address and deliver the proposal |
| Property address and the roof outline traced on the map | To measure the roof and produce the estimate |
| Free-text notes the contractor adds | Whatever the contractor chooses to record about the job |
| Quote contents: measurements, materials, prices, totals | To generate and re-issue the proposal |
Signature records
When a homeowner signs a proposal on the device, we store the signer's name, the signer's email address if given, an image of the signature, the date and time of signing, and the IP address and device identifier of the device used. These are kept together as evidence that the signature is authentic and attributable, as described in our Terms of Service. This record is deliberately immutable — it cannot be edited after signing, only deleted with the job it belongs to.
Location
If you grant the permission, the app reads your device's location while you are using it, for one purpose: to center the map on the property in front of you so you do not have to type the address. We do not track your location in the background, do not record a location history, and do not store these coordinates on our servers. Declining the permission only means you type the address instead.
What we do not collect
- We do not use advertising identifiers and do not sell or share personal information for advertising or cross-context behavioral advertising.
- We do not collect payment card numbers. Subscriptions are purchased through Google Play or the App Store, which handle payment details directly.
- The app has no third-party analytics or advertising SDK.
4. Where the information lives
RoofCast works offline by design. Quotes, measurements and signatures are written to a database on the device first, then synchronized to our servers when a connection is available. This means a copy of the job data sits on the phone or tablet until it is deleted there.
Our servers and stored files are hosted on Google Cloud Platform in the United States. Generated proposal PDFs and signature images are kept in private storage that is not publicly listable and is reachable only through short-lived links issued to the account that owns them.
5. Service providers
We share information only with providers that run the service:
| Provider | What it handles |
|---|---|
| Google Cloud Platform | Application hosting, database, file storage (United States) |
| Mapbox | Map and satellite imagery. Map requests include the coordinates being viewed |
| Esri, Google Imagery | Alternative satellite imagery layers, used the same way |
| Google Play, Apple App Store | App distribution and subscription billing |
We do not sell personal information, and we do not give it to anyone for their own independent purposes.
6. International transfers
RoofCast serves contractors in the United States and Canada, and data is stored in the United States. If you are in Canada, your information — and your customers' information — is processed in the United States and may be accessible to U.S. authorities under U.S. law. By using RoofCast you acknowledge this transfer. Contractors in Canada are responsible for making the disclosures PIPEDA requires of them to their own customers.
7. How long we keep it
- Account data — for as long as the account is open.
- Jobs, customers and proposals — until deleted by the contractor. Deletion is a soft delete first: the record is marked deleted and hidden, which is what lets the deletion reach every device that has a copy. Soft-deleted records are purged within 90 days.
- Signature records — kept for the life of the job they belong to, since they are the evidence the signature happened. Deleting the job deletes them.
- After account closure — deleted within 90 days, except where we must keep records to comply with law or to resolve a dispute.
8. Your choices and rights
Contractors can view and correct account and company details in Settings, export or delete individual jobs and customers in the app, and close the account by writing to privacy@roofcast.app.
Depending on where you live, you may have the right to access a copy of your personal information, correct it, delete it, or object to how we use it. Write to us and we will respond within the period the applicable law allows — generally 30 to 45 days. We will not discriminate against you for exercising these rights.
If you are a homeowner whose details are in RoofCast because a contractor quoted your roof: the contractor controls that record. Contact them first. If you cannot reach them, write to us and we will help identify the contractor and pass on your request.
9. Security
Traffic is encrypted in transit with TLS. Data is encrypted at rest by our hosting provider. Every record is scoped to the organization that owns it, and a request carrying one organization's credentials cannot read another's. Proposal PDFs and signature images sit in private storage reached only through expiring links.
No system is perfectly secure. If a breach affects your information, we will notify you and the relevant authorities as required by law.
10. Children
RoofCast is a business tool, not directed at children, and we do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.
11. Changes
If we change this policy we will update the date at the top. For changes that materially affect how we handle your information, we will notify account holders by email or in the app before the change takes effect.
12. Contact
RMML FLORIDA LLC
3757 S Heron Point, Inverness, FL 34450, United States
privacy@roofcast.app