Privacy Notice

Who this Notice covers

This Notice covers users at EGCR and other participating companies, plus homeowners, customers, and other people whose information a participating company enters or receives for a roofing or restoration project. RepCommand is currently offered for United States use only.

Each participating company is responsible for its relationship with its customers and for giving them an appropriate privacy notice. RepCommand processes that company's workspace data to provide the service and protect the workspace.

Information we handle

• Account and workforce information, such as name, work email, role, and profile photo.
• Customer and project information, such as homeowner name, address, phone number, email, job details, and notes.
• Insurance and claim information, such as carrier, policy number, claim number, adjuster contact details, estimates, and related project records.
• Property information, including addresses, map coordinates, inspection details, photos, videos, documents, and roof-measurement reports.
• Communication records, including project emails and activity history.
• Payment-request information, including the requested amount, invoice reference, email address, payment status, and processor reference IDs.
• Company subscription information, including plan, trial and renewal dates, seat limits, billing status, and Stripe customer or subscription identifiers.
• Public demo-request information, such as name, work email, company name, and abuse-prevention signals.
• Technical information needed to operate and protect the app, such as account session information, IP-based abuse-prevention signals, and service logs.

Do not enter Social Security numbers, bank-account or card numbers, driver's-license numbers, passwords, or other credentials into RepCommand notes or uploads. ACH account entry is handled by Stripe Checkout, not RepCommand.

How we use information

• Run the sales, inspection, claim, production, customer-service, and payment-request workflows.
• Communicate about a project, appointment, invoice, payment request, or service issue.
• Create project documents, track work, and maintain operational and financial records.
• Protect RepCommand, prevent abuse, enforce role-based access, and maintain audit history.
• Connect a team member's Google Calendar, with their permission, and synchronize only the RepCommand tasks and schedule items allowed for their role.
• Meet legal, insurance, accounting, and contractual obligations.

How we share information

We share information only as needed to provide the service, complete a project, comply with law, or protect people and property. This can include the following service providers:

• Supabase for application database, authentication, and private file storage.
• Vercel for application hosting and operational logs.
• Stripe for company subscription billing and hosted customer payment checkout.
• Resend for project-related email delivery when EGCR sends email through RepCommand.
• Google Calendar when a team member chooses to connect an account. RepCommand creates dedicated calendars and sends approved scheduling details to them. RepCommand does not request Gmail inbox or message access.
• MapTiler for maps and address/geocoding features when those features are used.
• AccuLynx only when EGCR authorizes an import or integration.

A user may also choose to open a third-party link, such as Google Maps. That third party's privacy notice applies to information the user provides directly to it.

We do not sell personal information and do not use personal information for targeted advertising.

Payments

RepCommand uses a separate Stripe billing configuration for participating-company subscriptions. Stripe collects the payment details and returns limited billing status and reference information used to control workspace access.

Participating companies may also offer ACH payment requests through Stripe Checkout. Stripe collects the payment details needed to process the payment. RepCommand receives and stores limited payment-request and settlement information needed to match the payment to the correct job and keep an accounting record. A submitted ACH payment is not treated as received until Stripe reports it as successful.

Security and shared project albums

We use role-based access controls, private file storage, signed file links, and logged operational actions to limit access to project information. Project photo albums are shared only through a tokenized link that can be revoked and normally expires after 30 days. No method of transmission or storage is completely secure.

Retention

• Closed-job records are retained for 7 years after the job closes.
• Unsold lead records are retained for 24 months after the last meaningful contact.
• Migration source data is deleted 90 days after a verified import, unless it is still needed for reconciliation or a legal obligation.
• Share-album links expire after 30 days unless revoked sooner.
• Public demo-request records are retained for up to 90 days after the request.

We may retain information longer when required for a legal, insurance, accounting, dispute, or fraud-prevention purpose.

Your choices and privacy requests

Depending on where you live and the information involved, you may ask to access, correct, delete, or receive information about your personal data. You may also ask questions about our practices. We will verify a request before acting on it, and some records may need to be retained for the reasons described above.

To make a request or appeal a decision, visit the Privacy Requests page or email info@theelevatedroofer.com. We will respond within the time required by applicable law. We will not discriminate against someone for making a valid privacy request.

Children

RepCommand is not directed to children, and we do not knowingly collect personal information from children under 13.

Changes and contact

We may update this Notice when our practices or legal requirements change. The current version will always be posted here with its effective date.