Roofer Registry privacy policy

Last updated October 2026

What we collect

Contact request form. When you submit a contact request on a roofer's profile, we collect your first name, phone number, email address, ZIP code, project type, timeline, and whether the project involves an insurance claim. We also record the verbatim consent text you agreed to, the timestamp, and your browser's user-agent string. A hidden honeypot field is used to detect automated submissions; it is never stored for real users.

API and tool calls. Every call to our API (/api/v1) and MCP server (/api/mcp) is logged in an AgentCall record that stores the route name, a SHA-256 hash of the request arguments (no personally identifiable information), the caller's user-agent header, the HTTP status code, and the response time in milliseconds. We do not log IP addresses or full request bodies.

Subscriber email. If you subscribe to alerts, we collect your email address, audience type, and the page you subscribed from. Confirmation is required before we send any messages.

Who receives your contact request

When you submit a contact request, up to three emails are sent: (1) a confirmation to you with the roofer's license details; (2) if the roofer has claimed their profile and verified their email, a notification to the roofer with your contact details; (3) an admin copy to Roofer Registry at the address below. We never sell or share lead data with anyone other than the specific roofer you chose.

Email processing

Transactional emails are sent through Resend, Inc. (resend.com), which processes your email address and message content solely to deliver the email on our behalf. Resend's privacy policy governs their handling of that data.

Retention

Contact request records are retained indefinitely as consent evidence required by the Telephone Consumer Protection Act (TCPA). AgentCall logs are retained for metering and abuse detection; they contain no personally identifiable information. Subscriber records are deleted upon unsubscribe.

CAN-SPAM compliance

Every email we send identifies Roofer Registry as the sender, includes a physical mailing address, and provides a working unsubscribe mechanism. We honor unsubscribe requests within 10 business days. We do not use deceptive subject lines or misleading header information.

Cookies and analytics

We use Plausible Analytics, a privacy-focused analytics service that does not use cookies and does not collect personal data. No third-party tracking cookies are set.

Contact

Questions about this policy: kevin.colahan@gmail.com.