1. Who we are
SatRoofs (satroofs.com) is operated by PenSnap Software, LLC. Questions or requests about your data go to [email protected].
2. What we collect
- Your account. Name, email address, a hashed password (never the password itself), the company account you belong to, and your mobile number if you turn on text-message sign-in codes.
- Google or Microsoft sign-in. If you choose one, we receive your name, email address and an account ID from that provider (the standard openid, email and profile scopes). We get nothing else from your Google or Microsoft account: no mail, files, contacts or calendar.
- The roofs you measure. The addresses or coordinates you submit, the reports we produce, any feedback you leave on a report, and any measurement files you choose to upload.
- Billing. Your report usage and plan. Card details are entered with and held by Stripe; we never see or store your card number.
- Basic logs. Requests to the service, kept to run it, debug it and stop abuse.
3. How we use it
To sign you in and keep your account secure, produce the measurement reports you ask for, bill for them, answer support requests, and improve measurement accuracy. Report feedback and uploaded measurements may be used to test and improve our measurements. We don't use your data for advertising and we don't sell it.
4. Who we share it with
Only the service providers that run SatRoofs, each for its own job:
- Google: the Solar and Maps APIs receive the location being measured; Google sign-in, if you use it.
- Microsoft: Microsoft sign-in, if you use it; public aerial and elevation data from Microsoft's Planetary Computer and the U.S. Geological Survey (these receive the area being measured, not your account).
- Anthropic: an AI vision model reads aerial images of the roof being measured. It receives the imagery and location, not your account details.
- Stripe: payments and usage billing.
- RepLine (a PenSnap Software product): delivers text-message sign-in codes to your phone.
- Resend: delivers account emails such as password resets.
- Railway: hosting and our database.
If you connect SatRoofs to another app (for example a CRM, through the Connected apps screen), that app receives the reports and order details you send it. We may also disclose information when the law requires it.
5. Cookies and browser storage
We use only the cookies needed to run the service, and no advertising or analytics trackers:
- sm_sess: keeps you signed in. It ends after 7 days without use, or 90 days at most.
- sm_dt: remembers a trusted device for 90 days so you aren't asked for a text code every time, if you tick "Remember this device".
- sm_oauth: lasts 10 minutes while a Google or Microsoft sign-in is in progress.
Pages load fonts from Google Fonts, which receives your IP address when it serves them.
6. How long we keep it
Account data and reports are kept while your company's account is open. Google Solar data behind a report is cached for at most 30 days, as Google's terms require. Ask us at [email protected] and we'll delete your account and reports, except for records we must keep by law, such as billing records.
7. Security
Data travels over HTTPS. Passwords are stored only as salted hashes, sign-in sessions can be cut off at any time, and accounts support a second step by text-message code.
8. Your choices and rights
You can ask to see, correct, export or delete your personal information by emailing [email protected]. If you signed in with Google or Microsoft, you can also remove SatRoofs' access from your Google or Microsoft account settings at any time.
9. Children
SatRoofs is a business tool and isn't meant for anyone under 16.
10. Changes
If we change this policy we'll update this page and the date at the top.