Privacy Policy

Riptide AI Consulting LLC ("Riptide," "we," "us") operates the Roof Diagnose web application (the "Service"). This Privacy Policy explains what we collect, how we use it, and the choices you have.

What we collect

• Roof photos you upload. Images are sent to our API server and forwarded to our third-party AI provider for vision analysis. For subscribers, each photo and its annotated AI result are then archived to encrypted object storage (Vercel Blob, US-based) so the report can be re-downloaded from My reports. Retention is automatic — entries are purged after 365 days, and you can delete any report yourself at any time. For free-trial users, photos are held in memory only for the duration of the analysis request and are not archived.
• Inspection metadata.Optional property information you enter (homeowner name, property address, inspector name, inspection date, claim number) is stored only in your browser's sessionStorage. The property address you enter may be sent to our servers and saved alongside the report when you analyze as a subscriber, so the address appears in your history list — never the full set of metadata fields.
• Account + billing data. When you subscribe, we store your email, your Stripe customer ID, and per-month usage counters (photos analyzed, emails sent) so we can enforce plan limits. Card details never touch our servers — Stripe holds them directly.
• Technical logs. Standard web-server logs (IP address, request timestamp, user agent, error messages) are retained for up to 30 days for security and debugging. Secrets and API keys are scrubbed from log lines before they reach our log aggregator.
• Analytics. Aggregated, anonymized usage stats (page views, feature usage) may be collected via Google Analytics, and only after you opt in through our cookie-consent banner. No personally identifying information is included.

How we use this information

• To run the AI inspection and return findings to you.
• To monitor service health, security, and abuse.
• To improve our prompts and product quality. Photo content is never used to train third-party AI models; see "AI provider data handling" below.

AI provider data handling

Photos and prompts you submit are forwarded to a third-party AI provider via their commercial API. Per the provider's policy, prompts and completions submitted via their API are not used to train their models, are encrypted in transit and at rest, and are retained per their published retention schedule. If you need details about our specific AI provider for compliance or due-diligence reasons, email hello@riptideai.co and we'll share them.

Data retention

See our data retention policy for retention periods and deletion guarantees.

Shareable report links

When you generate a homeowner report, you can create a shareable link to a read-only view of that inspection's photos and summary. The link does not require sign-in — anyone you send it to can open it — and it expires automatically after 90 days. The page shows only the inspection photos, the roof health score, and your company branding; it never includes insurance, claim, or building-code detail. Only share the link with people you intend to give access to the inspection.

Your rights

You can self-serve delete individual archived reports from My reports — the photo, the annotated result, and the audit-log entry are all removed in seconds. For broader requests (a full data export, account-wide deletion, or corrections), email hello@riptideai.co. We respond within 30 days.

Children

The Service is intended for use by professionals (sales reps, contractors, inspectors, adjusters). It is not directed at children under 16, and we do not knowingly collect data from children.

Changes

We may update this policy. When we do, we'll update the "last updated" date at the top and, for material changes, notify users via prominent notice on the Service.

Contact

Riptide AI Consulting LLC, Houston, TX · hello@riptideai.co