Privacy policy
Last updated September 19, 2026
Information we process
RoofNudge processes account details, organization configuration, roofing lead information, service-area data, team membership, subscription records, communications, usage, calendar appointment data, and security logs that customers provide or route through the service. When an organization connects Gmail or Microsoft Outlook, RoofNudge processes the mailbox messages and thread metadata needed to identify customer inquiries, display conversations, and send replies.
How information is used
We use information to provide, secure, support, and improve the service; operate lead follow-up and two-way email communications; generate automated replies when enabled by the customer; create and manage appointments in a connected Google or Outlook calendar; maintain account and billing operations; prevent abuse; and comply with law. SMS and voice are not currently active features.
Connected account data
Google and Microsoft user data is used only to provide the connected email and calendar features requested by the organization. Mailbox access is limited to reading message and thread context and sending replies from the connected mailbox. We do not use connected account data for advertising, and credentials are encrypted before storage. An organization can disconnect its integrations from RoofNudge.
Service providers
RoofNudge uses hosting infrastructure, Supabase for identity and data, Paddle for billing, Resend as a fallback email delivery provider, OpenAI for enabled automated reply generation, Google APIs for connected Google services, and Microsoft Graph for connected Outlook services. Paddle acts as Merchant of Record for purchases. Each provider processes information under its own contractual and privacy obligations.
Customer responsibilities
Roofing companies control the lead data submitted to RoofNudge and are responsible for providing required notices, obtaining necessary consent, honoring opt-outs, and using communication features lawfully.
Security and retention
We use tenant isolation, row-level security, access control, credential encryption, encryption in transit, validated request boundaries, and audit trails. Information is retained only as needed for the service, legal obligations, dispute resolution, and security. To prevent repeated free-trial abuse, we retain hashed account-email and Paddle-customer identifiers, workspace identifiers and trial dates after account deletion where necessary for this purpose. These records are pseudonymous, not anonymous. We do not store payment-card numbers; Paddle handles payment details.
Your choices
Account owners may request access, correction, export, or deletion through support. Some billing and audit records may be retained where required by law or legitimate security needs.
Data controller and contact
RoofNudge is operated by Yordan Minkov, trading as RoofNudge, based in Bulgaria.
Yordan Minkov, trading as RoofNudge is the data controller for RoofNudge account, support, and service-administration data. Customer organizations determine the purposes of processing their own lead and customer communications; RoofNudge processes that information on their behalf to provide the service.
Privacy requests: hello@roofnudge.com.