Privacy Policy

Information we collect

Documents you upload

The roofing proposals you upload (PDF, JPG or PNG files). Proposals usually contain information about you, your property and the contractor, including:

• customer name;
• project address, and city, state and ZIP code;
• email address and phone number;
• contractor information, such as the company name and contact details;
• quote pricing, payment terms and allowances;
• roof, scope, material and warranty details.

Information you enter

When you confirm a quote's details, you may enter or correct the contractor name, quoted total, roof size, price selections and your project ZIP code.

Technical information

Like most websites, our hosting provider processes technical request information such as IP address, browser type and request logs. We use it, and the approximate location derived from your IP address, to operate and secure the Service, troubleshoot problems, prevent abuse, and route or restrict access by region.

Cookies

We do not currently use advertising or third-party analytics cookies. If you arrive through a partner link, we set one cookie that stores an opaque referral code for up to 30 days so the comparison can be attributed to that link. Administrator sign-in uses a separate security cookie that is only set for our staff.

How we use information

• to provide the Quote Health Check and quote comparison you request;
• to extract, organize and normalize information from your proposals;
• to troubleshoot problems and improve extraction accuracy, including review by our staff;
• to maintain the security and integrity of the Service and prevent misuse;
• for internal analytics and roofing-market insights, such as typical prices and scopes by area;
• where applicable, to identify whether a comparison may correspond to an existing business lead or customer relationship of YI Media or a partner;
• to comply with legal obligations and enforce our Terms of Use.

Contact details found in a proposal (name, street address, email, phone) are stored separately from the extracted quote data.

Service providers

We use these providers to run the Service. They process information on our behalf:

• Vercel — website hosting, request handling and logs, and request geolocation.
• Supabase — database and private file storage for uploaded documents and results.
• Google (Gemini / Google AI services) — automated reading of uploaded documents to extract proposal information. Uploaded documents are sent to Google for this purpose.

We may also disclose information if required by law, to protect rights, safety or the Service, or as part of a business transfer such as a merger or acquisition.

How long we keep information

Default retention periods:

• Uploaded proposal files: approximately 90 days. They may be deleted sooner to manage storage.
• Full extracted proposal data and the quoted text snippets that support it: approximately 90 days.
• Comparison results: approximately 365 days.
• Contact details from proposals (name, address, email, phone): according to applicable business and customer-relationship (CRM) retention policies.
• Normalized pricing, scope and location information used for analytics and market insights may be kept longer. It is stored without your name, street address, email or phone number, and we use aggregated or de-identified information where appropriate.

Technical logs are kept according to our hosting provider's retention settings.

Deleting your information

On your results page you can delete your uploaded documents. This removes the stored files, the extracted proposal data and quoted snippets, and the contact details found in the proposals. The summary results and normalized pricing information remain until they expire.

For other privacy or deletion requests, contact us at our contact page. Tell us which comparison your request is about (for example, the date you used the Service). We may need to verify your request. Depending on where you live, you may have additional rights under applicable law.

Security

Uploaded documents are kept in private storage that is not publicly accessible, and connections to the Service are encrypted. Administrative access is restricted. No method of storage or transmission is completely secure, so we can't guarantee absolute security.

Children

The Service is intended for adults and is not directed to children. We do not knowingly collect information from children under 13. If you believe a child has provided information, contact us and we will delete it.

Where the Service is available

The Service is operated from the United States and is not currently offered to users located in California. Access is restricted using approximate IP-based location, which may not always be accurate.

Changes to this policy

We may update this policy as the Service changes. When we do, we'll update the “Last updated” date above.

Contact

Privacy questions and requests: our contact page.