Privacy Notice

• Account data: name, email address, login credentials, company name.
• Usage data: addresses you measure, generated reports, photos you upload, saved measurements.
• Technical data: IP address, device identifiers, browser type, telemetry, and log data.
• Support data: messages and information you provide when contacting us.
• Payment data: handled by Paddle as the Merchant of Record; we receive limited transaction metadata only (e.g., transaction ID, amount, currency).

• To provide the Service (contract performance): account creation, generating roof measurements and reports, storing your data.
• Security and fraud prevention (legitimate interests): protecting accounts and preventing abuse.
• Customer support (legitimate interests / contract): responding to inquiries.
• Product improvement and analytics (legitimate interests): improving features and reliability.
• Legal compliance (legal obligation): meeting tax, accounting, and other obligations.
• Marketing communications (consent, where required): sending product updates if you opt in.
• Advertising measurement (legitimate interests, where permitted): measuring which Google ads lead to purchases and helping Google optimize those ads. See Cookies below.

• Paddle.com Market Ltd — our Merchant of Record, which handles checkout, payments, billing, tax compliance, invoicing, refunds, and subscription management.
• Service providers / subprocessors: hosting, database, email delivery, analytics, and customer support tooling.
• Mapping and imagery providers: Google (Maps, Places, Solar, Geocoding APIs) to provide measurement functionality.
• Professional advisers: legal, accounting, and similar professionals.
• Authorities: where required by law or to protect our rights.

• Supabase (database, authentication and file storage)
• Paddle (payments, as Merchant of Record)
• Google Maps, Google Solar and Google Geocoding (roof measurement)
• Google Ads (advertising measurement and ad optimization)
• Lovable email (sending email)

We retain personal data only as long as needed for the purposes set out above, or as required by law (for example, transactional records for tax/accounting). When data is no longer needed, we delete or anonymize it.

Depending on your location, you may have rights to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the details below; we will respond within the time required by applicable law (typically within one month).

Where personal data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where applicable.

We implement appropriate technical and organisational measures, including encryption in transit, access controls, and audit logging, to protect personal data against unauthorized access, alteration, disclosure, or destruction.

For privacy questions or to exercise your rights, contact Romanthings by email at vicenteroman@romanthings.net or by mail at 3500 W Court St, Pasco, WA 99301. For payment- or refund-related questions, you can also contact Paddle at paddle.net.

This notice is governed by the laws of the State of Washington, USA.