Privacy policy

Last updated October 24, 2026.

This policy explains what Roofline (“we”, “us”) collects, why, who sees it and what you can do about it. It covers two groups of people: members, who use the service, and property owners, whose public-record information appears in it.

1. Information about members

Account. You sign in with Google. From Google we receive your name, email address, a Google account ID and whether Google has verified the address. We never see your Google password. You can change the name and the markets on your account page.

Your work in the app. The markets you pick, the leads you receive, the statuses, stars, follow-up dates, notes and call outcomes you record, your feedback on leads, and the CSV exports you request.

Billing. Your plan, purchases and invoices. Card details go directly to Stripe, our payment processor; we store Stripe's customer and subscription IDs and the last state of each payment, never your card number.

Security logs. Sign-ins, sign-outs, account changes, purchases, lead claims, exports and owner lookups, with the time and the IP address of the request. We keep these for up to 12 months to protect accounts and investigate abuse. Our web server also keeps standard access logs (request path, time, IP address, browser) for up to 14 days; cookies, sign-in tokens and payment identifiers are stripped from them.

Support. Emails you send us and our replies.

We don't collect anything through analytics or advertising trackers. There are none on the site.

2. How we use members' information

To create and secure your account, choose and deliver leads, process payments and send receipts (Stripe emails those), answer support requests, enforce our terms, meet legal obligations such as tax and payment records, and improve the service. Feedback you leave on leads may be used in aggregate, without identifying you, to improve our models. We don't sell members' personal information, and we don't share your notes or pipeline with other members.

3. Cookies

We use first-party cookies only. One keeps you signed in (up to 30 days, or 14 days without activity), one protects forms against cross-site request forgery, and one short-lived cookie (10 minutes) secures the Google sign-in step. There are no advertising, analytics or tracking cookies, and no third-party cookies. Your browser's local storage holds small conveniences such as a pending purchase while you're on Stripe's checkout page.

4. Information about property owners

Roofline shows information about residential properties and their owners of record. It comes from public records published by county and city governments: assessor and recorder files (owner name, mailing address, parcel, sale date and price, assessed value, year built), tax-collector delinquency lists, and public crime and census statistics, together with aerial imagery licensed from Esri and our own software estimates derived from these (value, equity and the likelihood of a sale).

On paid plans, when a member opens a lead or exports leads, we ask a third-party people-search provider for the owner's phone numbers and email addresses. We send that provider the property address and the owner's name and mailing address as they appear in the public record, nothing about the member. The provider may also return the owner's approximate age, whether a number is on the Do Not Call Registry, whether the person is deceased, and whether they are a known telemarketing litigant. We keep a lookup result for up to 12 months so that the same owner isn't looked up repeatedly, then refresh it the next time a member needs it.

Members may use this information only for lawful real-estate purposes under our terms, and they, not Roofline, decide whether and how to contact an owner. Roofline is not a consumer reporting agency; the information is not a consumer report and may not be used for credit, insurance, employment, tenant screening or similar decisions.

5. Property owners: your choices

If you own a property shown in Roofline and would like your information reviewed, corrected or removed, email support@rooflinedeals.com with the property address. We will confirm within 10 days and complete the request within 45 days. Removal suppresses the property and your contact details from Roofline going forward and asks members who already hold the lead to stop; it can't recall information a member already exported. Because the underlying records are published by your county, the record itself remains there. You may make a request through an authorized agent; we may ask for proof of identity or authority before acting.

6. Members: your choices

You can see and change your account details and markets at any time, download your leads and notes as a CSV (paid plans), sign out other devices, and delete your account from the account page. Deleting your account cancels any subscription and removes your account, leads, notes and exports from our live systems immediately and from backups within 30 days. We keep what the law requires: payment records at Stripe, and the security-log entry that the account was deleted. You can also email us to exercise any of these rights.

7. Who else receives information

We share information only with the service providers that run Roofline, each for its own function and under its own terms:

Google (sign-in). Stripe (payments, invoices, receipts). Our owner-lookup provider (currently Tracerfy, with BatchData as a backup) receives property addresses and owners' public-record names and mailing addresses. Esri (ArcGIS) serves aerial imagery to our server; it does not receive member or owner identities. Our hosting provider stores the servers and backups. We may also disclose information when the law requires it, to protect the rights and safety of owners, members or the public, or as part of a sale or merger of the business, in which case this policy continues to apply.

We do not sell members' personal information. We do make property owners' public-record information and lookup results available to members as the service itself, which some state laws treat as a “sale” of personal information; owners' rights for that are in section 5.

8. How long we keep information

Member accounts and their work: for as long as the account exists, then deleted as described in section 6. Security logs: up to 12 months. Web-server access logs: up to 14 days. Owner lookup results: up to 12 months. Payment records: as long as tax and accounting law requires, at Stripe. Property and public-record data: refreshed and replaced as new records are published.

9. Security

All traffic is encrypted in transit. Sign-in tokens are stored hashed; sign-in is only through Google, so we hold no passwords. Each member can only reach their own leads and notes. Payments never touch our servers. Databases are backed up nightly to a separate location. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.

10. California residents

If you live in California, you may have the right under the California Consumer Privacy Act to know what personal information we hold about you, to have it deleted or corrected, to opt out of its sale or sharing, and not to be discriminated against for exercising these rights. Members' information is never sold or shared for advertising. Property owners can opt out of their information being made available to members by using section 5; that request is treated as a “do not sell” request. To exercise any right, email support@rooflinedeals.com. The categories of information we collect and their sources, purposes and recipients are described above. We don't knowingly collect information about anyone under 16.

11. Children

Roofline is for business use by adults. We don't knowingly collect information from anyone under 18, and we'll delete it if we learn we have.

12. Changes

We may update this policy. For material changes we'll give notice by email or in the app at least 14 days before they take effect. The date at the top shows the current version.

Contact

Questions or requests about your data: support@rooflinedeals.com.