Privacy Policy

Last updated: September 1, 2026

1. Overview

StormLead is a business-to-business platform that helps roofing companies identify and manage storm-damage sales leads. This policy explains what information we collect, how we use it, and the choices you have. StormLead is used by roofing companies (our customers) and their authorized employees (“users”).

2. Who Is Responsible for Your Data

The Service is operated by StormLead LLC, a limited liability company formed in Arizona, which is the data controller for account and usage information described below. For lead and homeowner information entered by our customers, the roofing company that entered it is the controller and StormLead LLC acts as a processor on that company’s instructions. You can reach us at contact@waleedalfar.com.

3. Information We Collect

  • Account & company information: name, email, role, and company details.
  • Lead information: property addresses, and where provided by you, homeowner names, phone numbers, and email addresses entered by your sales representatives.
  • Location data: when you grant permission, the mobile app uses your device location to show nearby properties and optimize field routes.
  • Photos and media: images and videos of properties captured for lead records.
  • Device & usage data: device type, app version, and diagnostic/error data.

4. How We Use Information

  • Provide and operate the StormLead service, including lead scoring and route optimization.
  • Authenticate users and secure each company’s data in isolation from other companies.
  • Send SMS or email follow-ups only where a valid consent record exists (see Section 7).
  • Maintain audit logs, troubleshoot issues, and improve reliability.

5. Service Providers (Sub-processors)

We share data with the following providers solely to operate the service:
  • Supabase — authentication and database hosting
  • Google Cloud — application hosting
  • Stripe — subscription billing (we never store full card numbers)
  • Cloudflare R2 — secure media storage
  • Google Maps — mapping and route optimization
  • Sentry — error monitoring (personal data is masked)
  • Twilio / SendGrid — SMS and email delivery, where enabled
  • NOAA, Tomorrow.io, ATTOM — storm and property data enrichment

6. Location, Camera, and Photo Permissions

The mobile app requests location, camera, and photo-library access to support field work (showing nearby properties, capturing property photos, and optimizing routes). These permissions are optional and can be revoked at any time in your device settings; some features will be unavailable if revoked.

7. SMS / Email Consent (TCPA)

StormLead will not send a marketing SMS or email to a homeowner unless an active consent record exists for that contact. Recipients may opt out at any time (e.g., replying STOP to SMS), which sets a do-not-contact flag that blocks further messages. Consent records are retained for compliance purposes.

8. Data Retention & Security

Data is retained for as long as your company maintains an account, and afterward as needed for legal and compliance obligations. We enforce database-level access isolation between companies, encrypt data in transit (HTTPS/TLS), and restrict file access via expiring signed URLs. Audit logs are append-only.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data. Because StormLead processes most data on behalf of our roofing-company customers, requests from homeowners are generally directed to the relevant company. You may contact us at contact@waleedalfar.com and we will assist or route your request appropriately.

10. Children’s Privacy

StormLead is a business tool and is not directed to children under 13, and we do not knowingly collect their information.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

12. Contact

Questions about this policy? Contact us at contact@waleedalfar.com.