Privacy Policy

Last updated September 20, 2026

360 Roofing (“we”) operates 360 Roofing CRM, an internal business application used by our own employees to run our roofing business. It is not a public product and there is no public sign-up. Accounts are created only by 360 Roofing for 360 Roofing staff. This policy explains what information the application holds, why, and who can reach it.

Information we hold

The application stores the records needed to run roofing jobs:

• Customer and prospect information — name, address, phone numbers, email address, how the lead reached us, and notes our staff record about the job.
• Job records — measurements, estimates, proposals, signed contracts and electronic signatures, work orders, material orders, photographs of the property, and uploaded documents such as insurance scopes.
• Financial records — invoices, payments and the commissions our staff earn.
• Employee account information — name, work email address, role, and an audit record of actions taken in the system.

We collect this information because a customer asked us to quote or perform work, or because a person submitted their details to us requesting contact. We do not buy contact lists and we do not sell, rent or trade any of this information.

QuickBooks Online

A 360 Roofing owner may connect the application to our own QuickBooks Online company using Intuit’s authorization process. The connection uses the com.intuit.quickbooks.accounting scope, and we use it only to create and update Customer and Estimate records in that QuickBooks company so our office does not have to retype approved jobs.

• We connect only to QuickBooks companies owned by 360 Roofing. We never connect to, or access, a customer’s or a third party’s QuickBooks data.
• Intuit access and refresh tokens are stored in our database, which is encrypted at rest, and are never exposed to the browser or to any page a customer can reach.
• Only the owner role can connect or disconnect QuickBooks, and every connection and disconnection is written to our audit log.
• Disconnecting — either inside the application or from QuickBooks — revokes our tokens and stops all further syncing. Records already written into QuickBooks remain in QuickBooks and are governed by Intuit’s terms and by our own accounting retention practices.

Where the information is kept

The application runs on Vercel and stores its data with Supabase, both in the United States. No customer information is stored outside the United States. We use a small number of service providers to make specific features work, and each receives only what that feature requires:

• Supabase — database, file storage and sign-in.
• Vercel — application hosting.
• Intuit QuickBooks Online — accounting sync, as described above.
• Resend — sending email such as proposals, invoices and notifications.
• Twilio — sending and receiving text messages, and routing inbound calls to our office.
• Google Maps and OpenStreetMap — turning a location on the canvassing map into a street address, and drawing the map itself. These receive map coordinates only, with no name or contact details attached.

The application also contains features that rely on Anthropic (AI review of estimate figures and reading uploaded measurement or insurance PDFs), Sentry (error reporting), PostHog (usage analytics) and Cal.com (appointment booking). None of these are enabled in our live system today and none of them receive any information from it. If we turn one on, it will move into the list above and the date at the top of this page will change.

How the information is protected

• All traffic is encrypted in transit, and stored data is encrypted at rest.
• Access is restricted by role and enforced by the database itself, not only by the application, so a software fault cannot expose one employee’s records to another who should not see them.
• Records are never truly deleted from the interface — they are archived — and an append-only audit log records who changed what and when.

How long we keep it

We keep customer and job records for as long as we have a business or legal reason to, including warranty obligations, tax and accounting requirements, and insurance claim history. Roofing warranties run for years after a job is finished, so these records are long-lived by design.

Your choices

If you are a customer or prospect, you may ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to office@360roofingutah.com and we will respond. We may need to keep certain records where the law, a warranty, or an insurance claim requires it, and we will tell you if that applies. Marketing emails include an unsubscribe link, and you can stop our text messages at any time by replying STOP.

Children

The application is a tool for our employees and is not directed to children. We do not knowingly collect information from anyone under 13.

Changes

If we change this policy we will update the date at the top of this page.

Contact

360 Roofing, 1451 N 200 E, #210, Logan, UT 84341 · office@360roofingutah.com· 435-750-9400