Policy
Privacy Policy
This policy explains how Understand / Decide handles information when you use the public website or Roof Quote Analyzer.
Effective: August 23, 2026
1. Who operates the service
Understand / Decide operates this website and Roof Quote Analyzer. The service is an independent document-review tool. It is not operated by or affiliated with a roofing contractor, manufacturer, insurer, lender, government agency, or trade association.
2. Information we may process
Information you provide
When you use Roof Quote Analyzer, you may provide contractor estimates or proposals, contractor or quote labels, a customer reference, project state, ZIP code, a delivery email address, and confirmation that you have permission to upload the documents. Uploaded documents may contain names, addresses, signatures, prices, contract terms, or other information included by the document issuer.
Payment information
Payments are handled through Stripe-hosted Checkout. Understand / Decide does not receive or store your full card number or card security code. We may receive payment-related identifiers, status information, amount, and contact information needed to reconcile the purchase and provide support.
Technical and analytics information
Our hosting and service providers may process routine technical information needed to deliver and secure the service, such as an IP address, browser or device information, request timestamps, requested paths, and error or security logs.
We also use PostHog in cookieless analytics mode to measure website traffic and a small set of product-conversion events. Our PostHog configuration does not store PostHog cookies or use local or session storage, does not create person profiles, and does not use session replay, heatmaps, frontend autocapture, or web-vitals autocapture. We do not send uploaded document contents, filenames, customer references, names, email addresses, ZIP codes, project state, support references, job identifiers, or payment-card details to PostHog. Analytics events may include a privacy-sanitized page path, browser or device information, referring domain, quote count, and the applicable pricing tier or job outcome.
We also load our existing Google Tag Manager container on the public Understand / Decide website to support Google Analytics and advertising measurement. The site establishes denied consent by default for analytics storage, advertising storage, advertising user data, and advertising personalization before Tag Manager starts. If you have not accepted optional cookies, consent-aware Google tags may still send limited cookieless measurements such as the page URL, browser or device information, referring source, consent state, and campaign parameters. We also enable ads-data redaction and disable Google Signals and ad-personalization signals.
The public site provides a Cookie choices control. If you choose Accept optional cookies, the site updates those Google consent signals to granted and allows our Reddit advertising pixel to run for advertising measurement. Google and Reddit may then store or read cookies or similar identifiers and receive technical, campaign, page-view, and conversion-event information needed for measurement. If you decline optional cookies, the Reddit pixel remains blocked and Google remains in its limited cookieless measurement mode. We store your consent choice in local browser storage so the site can remember it; if local storage is unavailable, the site may use a first-party preference cookie for the same purpose. You can change the choice later through the Cookie choices control in the footer.
Google and Reddit measurement are limited to the public Understand / Decide website and are not loaded on Roof Quote Analyzer pages. For this public-site tagging, we do not intentionally send uploaded quote contents, filenames, customer references, support references, job identifiers, names, email addresses, ZIP codes, project state, or payment-card details.
Communications
If you purchase a completed report, we use the delivery email supplied with the job to send the results-page link, individual HTML and PDF report links, the complete ZIP link, and service or delivery notices. If you contact us, we receive the email address and content you choose to send.
3. How information is used
We use information to provide the requested quote review, generate and deliver reports, process and reconcile payment, prevent abuse, troubleshoot errors, secure and improve the service, respond to support or deletion requests, and comply with legal obligations. Authorized personnel may review active job materials during the short retention period when reasonably necessary for quality assurance, troubleshooting, abuse prevention, or support. This does not place customer documents into a permanent training or test corpus.
4. Service providers
We use service providers to operate the service. These currently include Render for application hosting, OpenAI for API-based document analysis, Stripe for payment processing, Google Workspace for paid-report delivery email, PostHog for cookieless website and product analytics, Google for public-site analytics and advertising measurement through Google Tag Manager, and Reddit for optional advertising measurement when you grant optional-cookie consent. Information is disclosed to these providers only as reasonably necessary to provide, secure, measure, and support the service, subject to their applicable agreements and policies.
OpenAI states that API inputs and outputs are not used to train its models by default unless the customer explicitly opts in to share data. Provider practices can change, and their current terms and privacy materials govern their processing.
5. Retention
Roof Quote Analyzer is configured to automatically delete uploaded customer documents, the job delivery email, normalized analysis files, job data, and generated reports from active application storage within 72 hours after a job completes or fails. A paid-report delivery message may remain in the recipient's mailbox and in Google Workspace operational records under the recipient's and provider's settings and policies; the report links stop working when the underlying job is deleted. Analytics and advertising-measurement events are separate from that customer-job storage. PostHog may retain privacy-sanitized cookieless events according to our PostHog project settings and PostHog's applicable retention policies. Google and, when optional-cookie consent is granted, Reddit may retain public-site measurement data according to their applicable analytics and advertising settings and policies. Payment processors, hosting providers, email providers, security providers, analytics providers, and API providers may retain transaction records, logs, backups, or other limited data under their own operational, security, legal, or financial-record requirements. See our Data Retention Policy for details.
6. Sharing and selling
We do not sell personal information. We do not use uploaded quote documents for targeted advertising. We may disclose information to service providers, when required by law, to protect the service or users, or in connection with a business transfer subject to appropriate safeguards.
7. Your choices
Do not upload information that is unnecessary for the quote review. When practical, remove Social Security numbers, bank or card details, account credentials, medical information, or other highly sensitive information before uploading. You may contact us to ask about information associated with an active job or request deletion before the automatic retention period ends. We may need enough information to locate the relevant job. On the public website, you can use the Cookie choices control in the footer to accept, decline, or change optional measurement consent at any time.
8. Security
We use reasonable technical and organizational measures for the service, including HTTPS, CSRF protections, file validation, upload limits, security headers, controlled job concurrency, Stripe-hosted payment collection, and short-lived application storage. No internet service can guarantee absolute security.
9. Children
The service is intended for adults and is not directed to children under 18.
10. Changes
We may update this policy as the service changes. The effective date at the top identifies the current version. Material changes will be posted on this page.
11. Contact
Email privacy, deletion, payment, or support questions to support@understanddecide.com.