Privacy Policy

Last updated: May 19, 2026

American Roofing Pro ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect when you visit americanroofingpro.us or submit our contact form, how we use that information, and the choices you have. By using this site you agree to the practices described here.

1. Information we collect

Information you provide directly

When you submit our contact form, we collect:

• Your name
• Your email address
• Your phone number (optional)
• The message you write

Information collected automatically

When you submit the form or browse the site we may also collect:

• Your IP address (used only for abuse prevention and rate limiting on our contact form, then stored alongside the lead record for fraud review)
• Your browser user agent string (used the same way)
• The page URL from which the form was submitted
• Aggregate usage statistics through Google Analytics 4 (page views, referrer, approximate location at the country/region level IP anonymization is enabled)

2. How we use your information

We use the information you submit to:

• Respond to your inquiry, send an automated confirmation email, and provide a written roofing estimate or service quote.
• Schedule appointments and coordinate work at your property.
• Maintain records of past customers and projects in accordance with California licensing requirements and our standard business practices.
• Improve the website and our services based on aggregate analytics.

We do not use your information for unsolicited marketing. We do not sell, rent, or share your personal information with third parties for advertising purposes.

3. Where your information is stored

Lead submissions are stored in:

• A private Google Sheet in our Google Workspace, accessible only to authorized members of our team.
• Our Google Workspace Gmail mailbox ([email protected]), for the duration we maintain that correspondence.

Web analytics data is held by Google Analytics 4. The website is hosted on Cloudflare Pages, with serverless functions running on Cloudflare's global edge network.

4. Cookies and similar technologies

The website uses only the cookies strictly necessary to operate the contact form (a short lived, HMAC-signed CSRF cookie that expires after two hours). Google Analytics 4 uses first party cookies (_ga, _ga_*) to count unique sessions; you can opt out of Google Analytics for any site by installing the official Google Analytics Opt out Browser Add on.

We do not use third party advertising cookies, retargeting pixels, or social media tracking pixels.

5. Data retention

We retain contact form submissions for as long as the relationship is active and for a reasonable period afterward, to maintain warranty records and respond to followup questions. Lead records older than 36 months that did not result in a project are archived or deleted. You may request earlier deletion at any time using the contact details below.

6. Your rights under California law

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the right to:

• Know what personal information we have collected about you and how we use it.
• Request a copy of that information.
• Request that we correct inaccurate information.
• Request that we delete personal information we hold about you.
• Opt out of the "sale" or "sharing" of your personal information we do not sell or share personal information for advertising, so there is nothing to opt out of, but we honor any such request automatically.
• Not be discriminated against for exercising any of these rights.

To exercise any of these rights, email [email protected] with the subject line "Privacy Request" and we will respond within 45 days as required by law.

7. Children's privacy

This site is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has submitted personal information through our site, contact us and we will delete it.

8. Security

We protect your information using reasonable administrative, technical, and physical safeguards: HTTPS on every page, an HMAC-signed CSRF cookie to prevent forged submissions, per-IP rate limiting, an industry standard 2FA-protected Google Workspace, and access controls so that only authorized team members can view lead records.

9. Third party links

This site links to outside services we use for social proof and contact (Instagram, Facebook, Google, Yelp). Those services have their own privacy policies; we are not responsible for their data practices.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. Material changes that affect how we use existing data will be communicated by a notice on the homepage for at least 30 days.

11. Contact us