Legal
Privacy Policy
Last updated November 13, 2026
We collect what the Service needs to work: your email for sign-in, the addresses you measure, and usage counts. We do not sell your personal information. Card payments are handled by Stripe; we never see card numbers.
Who is responsible
RoofLine360 is operated by Viktor Belous, a sole proprietor in Texas, USA. Questions and requests: support@roofline360.com.
What we collect
| Data | Why |
|---|---|
| Email address, account creation and sign-in times | Sign-in links, account, receipts and service messages |
| Addresses you search, the roofs built and the roofs you unlock | Building and showing roof models; your unlocked roofs. Roof models are tied to the address, not to you, and can be served to anyone who searches the same address |
| Usage counts (builds, PDFs, API calls) and API keys (stored as a one-way hash) | Free and paid limits, abuse prevention |
| Purchase records: product, amount, date, Stripe customer and session ids | Applying purchases, support. Stripe processes your name, billing address and card; we do not receive card numbers |
| Technical data: IP address, browser, request logs | Security, rate limits, troubleshooting |
| Analytics events (pages viewed, features used) on roofline360.com | Understanding how the Service is used. Addresses are removed from page URLs before analytics loads |
Cookies and local storage
- A sign-in cookie keeps you signed in for up to 90 days. It is required for accounts.
- Google Analytics (through Google Tag Manager) sets analytics cookies.
- Your browser keeps your recent roofs and settings in local storage; they never leave your device unless you open those roofs.
Who processes data for us
- Cloudflare: hosting, storage, database and email delivery.
- Stripe: payments, subscriptions, tax and the billing portal; for Managed Payments purchases Stripe is the seller of record and handles your payment data under its own privacy policy.
- Google: Google Analytics.
- Esri: address search (the address you type is sent to Esri) and aerial imagery.
- USGS and other public data sources: LiDAR and imagery for the area around the address.
We do not sell personal information and do not share it for cross-context behavioral advertising.
How long we keep it
- Account, unlock and purchase records: while your account exists, and purchase records as long as tax and accounting rules require.
- Roof models and address lookups: about 90 days after they were built or last refreshed.
- Sign-in links: unusable after 20 minutes; technical logs for a short period.
Your choices and rights
Email us to see, correct or delete your personal information, or to close your account. We answer within 30 days. Depending on where you live (for example California or Texas), you may have further rights, and you will not be treated differently for using them. You can block analytics cookies in your browser.
Security
Data is sent over HTTPS, sign-in uses one-time links instead of passwords, API keys are stored hashed, and access to stored data is restricted. No system is perfectly secure; tell us at once if you think your account was misused.
Children
The Service is for businesses and adults. It is not directed to children under 13, and we do not knowingly collect their information.
Changes
We will post updates here and change the date above; material changes will be announced on the site or by email.