Privacy Notice

• Account data: name, email address, login credentials, company name.
• Usage data: addresses you measure, generated reports, photos you upload, saved measurements.
• Technical data: IP address, device identifiers, browser type, telemetry, and log data.
• Support data: messages and information you provide when contacting us.
• Payment data: handled by Paddle as the Merchant of Record; we receive limited transaction metadata only (e.g., transaction ID, amount, currency).

• To provide the Service (contract performance): account creation, generating roof measurements and reports, storing your data.
• Security and fraud prevention (legitimate interests): protecting accounts and preventing abuse.
• Customer support (legitimate interests / contract): responding to inquiries.
• Product improvement and analytics (legitimate interests): improving features and reliability.
• Legal compliance (legal obligation): meeting tax, accounting, and other obligations.
• Marketing communications (consent, where required): sending product updates if you opt in.

• Paddle.com Market Ltd — our Merchant of Record, which handles checkout, payments, billing, tax compliance, invoicing, refunds, and subscription management.
• Service providers / subprocessors: hosting, database, email delivery, analytics, and customer support tooling.
• Mapping and imagery providers: Google (Maps, Places, Solar, Geocoding APIs) to provide measurement functionality.
• Professional advisers: legal, accounting, and similar professionals.
• Authorities: where required by law or to protect our rights.

We retain personal data only as long as needed for the purposes set out above, or as required by law (for example, transactional records for tax/accounting). When data is no longer needed, we delete or anonymize it.

Depending on your location, you may have rights to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us using the details below; we will respond within the time required by applicable law (typically within one month).

Where personal data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where applicable.

We implement appropriate technical and organisational measures, including encryption in transit, access controls, and audit logging, to protect personal data against unauthorized access, alteration, disclosure, or destruction.

We use strictly necessary cookies to operate the Service (e.g., authentication and session management). If we add analytics or marketing cookies, we will surface a cookie notice and collect consent where required.

For privacy questions or to exercise your rights, contact Romanthings at the support contact published on our website. For payment- or refund-related questions, you can also contact Paddle at paddle.net.