Privacy Policy

Information we collect

• Account data: name, email address, account identifiers, and authentication records. Supabase handles passwords and session credentials; RooFork does not receive your plaintext password.
• Calculator and report data: property, rent, loan, expense, and return assumptions you enter, plus reports you choose to save.
• Payment data: purchase status, transaction and customer identifiers, and limited billing details received from Stripe. Stripe processes full card details; RooFork does not store full card numbers.
• Newsletter and communications: email subscriptions, unsubscribe status, delivery records, and information submitted through contact or partner forms.
• Technical data: IP address, request details, browser and device information, security events, and consent choices. If you accept analytics, we also receive aggregate page-use information from Vercel Web Analytics.

How we use information

• Provide accounts, calculators, saved reports, purchases, support, and newsletters you request.
• Authenticate users, prevent abuse and fraud, investigate errors, and protect the Services.
• Process payments, maintain transaction records, and enforce our Terms.
• Measure aggregate use and improve the Services when analytics consent is enabled.
• Comply with law and establish, exercise, or defend legal claims.

Legal bases

Where data-protection law requires a legal basis, we rely on performance of a contract, your consent, compliance with legal obligations, and legitimate interests such as securing and improving the Services. You can withdraw consent for optional analytics through Cookie choices.

How we disclose information

We disclose information only as needed to:

• Supabase for authentication and database services; Stripe for checkout and payment processing; Vercel for hosting, security, and consented analytics; and email providers for requested messages.
• Professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, or address fraud and security incidents.
• A buyer or successor in a merger, financing, reorganization, or sale, subject to appropriate protections.

RooFork does not sell personal information or share it for cross-context behavioral advertising, and it does not use targeted advertising pixels.

Retention

We keep information for as long as needed to provide the requested service and for legitimate business, security, tax, accounting, dispute, and legal purposes. Newsletter records remain until you unsubscribe or request deletion. Saved reports remain until you delete them or ask us to delete the account, subject to required backup and legal retention. Retention periods depend on the type of record, sensitivity, legal requirements, and the need to prevent fraud.

Your choices and privacy rights

• Unsubscribe through the one-click link in each Housing Brief or by replying “unsubscribe.”
• Accept or reject optional analytics and change that choice at any time through our Cookie Policy. We treat an enabled Global Privacy Control signal as a rejection of optional analytics.
• Ask to access, correct, delete, or receive a copy of your personal information, or object to or restrict certain processing where applicable.
• Appeal a denied privacy request where applicable and lodge a complaint with your local data-protection authority.

Send requests to hello@roofork.com. We may verify your identity and may retain information when an exception applies. We will not discriminate against you for exercising applicable privacy rights.

Security

We use administrative, technical, and organizational safeguards appropriate to the information we handle, including encrypted transport, restricted service credentials, HttpOnly session cookies, request validation, automated-abuse controls, and platform firewall protections. No method of storage or transmission can be guaranteed completely secure.

International processing

RooFork is based in the United States. Information may be processed in the United States and other locations where our service providers operate, subject to applicable transfer safeguards.

Children

RooFork is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13. Contact us if you believe a child supplied personal information.

Changes

We may update this policy as the Services or applicable rules change. The date above shows the latest revision. We will provide additional notice when required for a material change.

Contact RooFork