Privacy Policy

Last updated: October 5, 2026

1. Overview

StormLead is a business-to-business platform that helps roofing companies identify and manage storm-damage sales leads. This policy explains what information we collect, how we use it, and the choices you have. StormLead is used by roofing companies (our customers) and their authorized employees (“users”).

2. Who Is Responsible for Your Data

The Service is operated by StormLead LLC, a limited liability company formed in Arizona, which is the data controller for account and usage information described below. For lead and homeowner information entered by our customers, the roofing company that entered it is the controller and StormLead LLC acts as a processor on that company’s instructions. You can reach us at support@stormlead.app.

3. Information We Collect

  • Account & company information: name, email, role, and company details.
  • Lead information: property addresses, and where provided by you, homeowner names, phone numbers, and email addresses entered by your sales representatives.
  • Location data: when you grant permission, the mobile app uses your device location to show nearby properties and optimize field routes.
  • Photos and media: images and videos of properties captured for lead records.
  • Device & usage data: device type, app version, and diagnostic/error data.
  • Hail report requests: if you use our free hail lookup and ask for a report, the address you searched, your email, whether you are a homeowner or a roofing professional, and, for professionals, your company name. We use these to send the report you asked for and, for professionals who agreed, occasional email about StormLead. We do not sell them or give them to roofing companies.

4. How We Use Information

  • Provide and operate the StormLead service, including lead scoring and route optimization.
  • Authenticate users and secure each company’s data in isolation from other companies.
  • Send SMS or email follow-ups only where a valid consent record exists (see Section 7).
  • Maintain audit logs, troubleshoot issues, and improve reliability.

5. Service Providers (Sub-processors)

We share data with the following providers solely to operate the service:
  • Supabase: authentication and database hosting
  • Google Cloud: application hosting
  • Stripe: subscription billing (we never store full card numbers)
  • Cloudflare R2: secure media storage
  • Google Maps: mapping and route optimization
  • Sentry: error monitoring (personal data is masked)
  • U.S. Census Bureau geocoder: turning an address searched in the hail lookup into a map location
  • Cloudflare Turnstile: telling people from bots on the hail lookup
  • Twilio / SendGrid: SMS and email delivery, where enabled
  • NOAA and Tomorrow.io: storm data

6. Location, Camera, and Photo Permissions

The mobile app requests location, camera, and photo-library access to support field work (showing nearby properties, capturing property photos, and optimizing routes). These permissions are optional and can be revoked at any time in your device settings; some features will be unavailable if revoked.

7. SMS / Email Consent (TCPA)

StormLead will not send a marketing SMS or email to a homeowner unless an active consent record exists for that contact. Recipients may opt out at any time (e.g., replying STOP to SMS), which sets a do-not-contact flag that blocks further messages. Consent records are retained for compliance purposes.

8. Data Retention & Security

Data is retained for as long as your company maintains an account, and afterward as needed for legal and compliance obligations. We enforce database-level access isolation between companies, encrypt data in transit (HTTPS/TLS), and restrict file access via expiring signed URLs. Audit logs are append-only.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data. Because StormLead processes most data on behalf of our roofing-company customers, requests from homeowners are generally directed to the relevant company. You may contact us at support@stormlead.app and we will assist or route your request appropriately.

10. Children’s Privacy

StormLead is a business tool and is not directed to children under 13, and we do not knowingly collect their information.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

12. Contact

Questions about this policy? Contact us at support@stormlead.app.