Privacy Policy

1.1 Information You Provide Directly

• Account information: Your name and email address when you register.
• Property information: Street addresses, city, state, and zip codes you submit for estimates.
• Photos: Roof or property photos you optionally upload to improve estimate accuracy.
• Communications: Messages you send us, including enterprise contact form submissions.
• Settings: Branding preferences, custom pricing, company name, logo, and contact details you configure.

1.2 Information Collected Automatically

• Usage data: Pages visited, features used, estimate count, and interaction timestamps.
• Device and browser information: IP address, browser type, operating system, and referral URLs.
• Cookies and similar technologies: See Section 6 for details.
• Log data: Server logs including request timestamps, API calls, and error reports.

1.3 Information from Third Parties

• Payment information: Stripe provides us with limited payment metadata (last 4 digits, card type, expiration). We never receive or store full card numbers.
• Satellite and map data: Google provides property imagery and location data based on addresses you submit.
• AI processing results: Roof geometry and condition analyses generated by our AI processing partners based on your submitted data.

We use your information for the following purposes:

• To provide, maintain, and improve the Service.
• To generate AI-powered roofing estimates for properties you submit.
• To process subscription payments and manage your account.
• To send transactional emails (account verification, billing receipts, estimate confirmations).
• To respond to your support requests and communications.
• To detect and prevent fraud, abuse, and security incidents.
• To analyze usage patterns and improve AI estimate accuracy.
• To comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data to serve you third-party advertisements.

We share your information only in the following circumstances:

3.1 Service Providers (Data Processors)

We share information with the following service providers who process data on our behalf under contractual data protection obligations:

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights or the safety of others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained for the life of your account plus 90 days after deletion to allow recovery.
• Estimate data: Retained for the life of your account. Deleted within 90 days of account deletion.
• Payment records: Retained for 7 years as required by financial regulations.
• Log data: Retained for up to 90 days.

You may request deletion of your account and associated data at any time by contacting help@gablr.ai.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Authentication and access controls on all data systems.
• Payment data isolation — card details are processed and stored exclusively by Stripe.
• Regular security assessments of our infrastructure.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

In the event of a data breach affecting your rights, we will notify you as required by applicable law.

We use cookies and similar technologies to operate and improve the Service. See our full Cookie Policy for details.

In summary, we use:

• Essential cookies: Required for authentication, session management, and security. Cannot be disabled.
• Analytics cookies: Google Analytics to understand how the Service is used. You may opt out via cookie settings.

We do not use advertising or marketing cookies. We do not track you across third-party websites.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and its 2026 amendments:

• Right to Know: You may request a copy of the personal information we have collected about you in the preceding 12 months, including the categories, sources, purposes, and third parties it was shared with.
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt-Out: We do not sell your personal information. If this changes, we will provide an opt-out mechanism.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of sensitive personal information (such as precise geolocation from property addresses and payment data) to what is necessary to provide the Service.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.
• Automated Decision-Making: Our AI generates roofing estimates based on your submitted property data. You may contact us to request information about this automated processing.

Categories of Sensitive Personal Information We Collect:

• Precise geolocation data (property addresses and coordinates).
• Financial information (payment details, processed exclusively by Stripe).

To exercise your California privacy rights, contact us at help@gablr.ai with the subject line "CCPA Rights Request." We will respond within 45 days. We may require identity verification before processing your request.

Residents of Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights to those described in Section 7, including the right to access, correct, delete, and opt out of certain processing of personal data. Contact us at help@gablr.ai to exercise these rights.

We recognize and honor Global Privacy Control (GPC) signals where required by applicable law.

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at help@gablr.ai and we will delete it promptly.

The Service is operated in the United States and is intended for US users. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

We do not currently direct the Service to users in the European Economic Area. If you are located in the EEA and believe GDPR applies to your use of the Service, please contact us.

We may update this Privacy Policy periodically. We will notify you of material changes by email and by posting the updated policy on this page with a new effective date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy inquiries, data requests, or concerns, contact our privacy team:

We aim to respond to all privacy requests within 45 days. For urgent security concerns, please include "URGENT" in your email subject line.