This Privacy Policy explains how Exterior Consigliere LLC ("we", "us") handles personal information in connection with the Exterior Consigliere platform (the "Service"). It covers two groups: (1) visitors to our website and people who sign up for an account, and (2) the authorized users of our customers (roofing companies, "tenants").
Important: when a tenant uses the Service to manage their own customers' (homeowners') data, that data is processed on the tenant's behalf. The tenant is the controller of that data; our handling of it is governed by our Data Processing Addendum. If you are a homeowner with questions about your data, please contact the roofing company you worked with.
To provide, maintain, secure, and support the Service; to process subscriptions and billing; to communicate with you about your account; and to comply with law. We do not sell personal information, and we do not use tenant or homeowner data for our own marketing or to train AI models.
We use a small set of trusted providers to run the Service. Each processes only what it needs:
| Provider | Purpose | Data it touches |
|---|---|---|
| Supabase | Database, authentication, file storage | Account & service content, credentials, documents/photos |
| Vercel | Application hosting & API | Request data in transit; logs |
| Stripe | Subscription billing | Billing details, card data (PCI; we never store cards) |
| Google (Maps / Geocoding / Solar) | Address lookup & roof imagery/measurement | Property addresses, coordinates |
| Anthropic (Claude API) | AI features | Text/photos submitted for AI processing (not used to train models) |
| Email delivery (SMTP) | Transactional & estimate/follow-up email | Recipient name/email, document links |
We maintain this list current and will give notice of material changes as described in the DPA.
We share information only with the subprocessors above to operate the Service, and when required by law or to protect rights and safety. We do not sell personal information or share it for cross-context behavioral advertising.
We keep account information for as long as your account is active. After cancellation, data is held and then deleted on the schedule in our Terms (a roughly 60-day hold-then-delete window), except where the law or a legal hold requires longer retention. We keep our own billing records as required for tax and accounting.
We protect data with measures including encryption in transit, row-level security so each tenant can access only its own data, and per-tenant isolation of stored files. No system is perfectly secure, but we work to safeguard your information and to notify affected customers of a breach as described in the DPA.
Depending on where you live, you may have rights to access, correct, or delete your personal information, and to not be discriminated against for exercising them. Because we act as a service provider for tenant and homeowner data, requests about that data should go to the relevant roofing company (the controller); we will assist them. For information we hold as a controller (your account data), contact us using the details below.
We use only the cookies/local storage needed to keep you signed in and to run the app. We do not use third-party analytics or advertising/tracking technologies.
The Service is a business tool not directed to children, and we do not knowingly collect information from anyone under 18.
We may update this Policy and will post the new version here (with notice for material changes).