---
title: Privacy Policy
description: Privacy Policy for All Service Leads. How we collect, use, and protect contractor and homeowner data on our lead-generation service.
url: https://allserviceleads.com/privacy
last_updated: 2026-09-12
---
# Privacy Policy

Last updated: September 12, 2026

This Privacy Policy explains how All Service Leads, formerly RoofRoof ("we", "us", "our") collects, uses, and shares information about you when you use our lead-generation service at allserviceleads.com and our lead-capture landing pages (collectively, the "Service"). This policy applies to two distinct groups: **contractors who buy leads** and **homeowners who submit their information through a landing page**. Different data is collected for each.

What we sell, so it is clear whose information is involved and why: Signature Roofing Leads at $5.00 per lead, and Roofing Inbound Calls at $150.00 per call, both sold to roofing contractors and both residential roofing only. The homeowner information described below is what those two products consist of.

**Short version:** We collect the minimum we need to run the service. Contractor accounts store your business details + billing info. Homeowner submissions store what you type into the landing page form, your phone for matching, and standard web analytics (IP, user agent, referrer). We share data with the processors we need to run the service (Stripe, Twilio, Resend, Meta) and nobody else.

## 1. What information do we collect?

Plain-English summary; the lists below are the full answer. From contractors: name, email, company, phone, a hashed password, Stripe billing details, order history and how you first found the site. From homeowners: what you type into the landing page form, your address and roof issue, and standard web analytics.

**If you are a contractor (buyer):**

- Account details: full name, email address, company name, phone number, hashed password
- Billing: Stripe customer ID and payment method (we never see or store your raw card number; Stripe handles that end-to-end)
- Order data: lead type, geography, quantity, and the leads delivered to your account
- Usage data: when you log in, which pages you view, API calls you make
- Visit source: the first page of our website you opened, the address of the website that linked you to it (without its query string), any campaign tags in that link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), any ad click identifier in it (gclid from Google, fbclid from Meta), and the time of that first visit. Your browser keeps this record and sends it to us only when you place an order or send the "Talk to a team member" form. We store it with that order, or receive it in the email that form sends us.
**If you are a homeowner (lead):**

- Contact details: name, phone number, email (if provided)
- Property address: street, city, state, zip
- Qualification details: whether you own the property, the roof issue you described, optional appointment time
- Matching: your phone number is used to connect you with a local service professional in your area
- Web analytics: IP address, user agent, referrer, UTM parameters from the ad that brought you to the landing page
- Meta browser cookies (_fbc, _fbp), only if you clicked on one of our ads and accepted cookies in that session

## 2. How do we use your information?

Plain-English summary; the paragraphs below are the full answer. Contractor data runs your account: signing you in, filling orders, charging the card at checkout, sending receipts and notifications, and showing which pages produce orders. Homeowner data is used to match you with a local professional and to confirm your submission.

**For contractors:** to authenticate you, fulfill your orders, deliver leads, charge your card at checkout for the full order total (the published per-lead price for the product you chose, times the quantity you ordered, minus any applied coupon), issue receipts, send you transactional notifications about your orders, comply with tax and legal obligations, and, using the visit source described above, see which of our pages and which referring websites or ad campaigns lead to orders and inquiries.

**For homeowners:** to match your inquiry with a licensed local service professional (roofing, pest control, or HVAC) in your area so they can contact you about your service need. We also use your contact details to confirm your submission via SMS/email and, if you booked an appointment, to coordinate that appointment. Meta browser cookies and hashed contact details are forwarded to Meta for ad attribution and improved ad targeting on future campaigns.

## 3. Who do we share your information with?

Plain-English summary; the list below is the full answer. A homeowner's details go to the contractor who bought that lead. Otherwise your data reaches only the processors that run the service, the advertising tools named below, and anyone a valid legal order names. We do not sell personal information.

We share your information only with the following categories of recipients:

- **Contractors who purchased your lead (homeowners only).** When your submission matches an active order, we deliver your name, phone, email, address, and roof issue to the contractor who bought that lead. Contractors are contractually prohibited from reselling your information and from using it for any purpose other than contacting you about your roofing inquiry.
- **Service providers (processors).** We use Stripe (payments), Twilio (SMS delivery), Resend (email), Cloudflare (DDoS protection and the Turnstile captcha used on our contact form), Supabase (database hosting), and Netlify (web hosting). Each of these processes data on our behalf under their own privacy terms.
- **Meta (Facebook).** We send hashed contact details and event data to Meta via the Conversions API (through a Stape gateway) so we can measure ad performance and optimize campaigns. Hashing is one-way SHA256, so Meta cannot recover your raw email or phone from the hash; they can only check whether you're already in their audience.
- **Google Tag Manager and RetargetIQ.** We use these tools to coordinate analytics and retargeting on our marketing pages.
- **Legal compliance.** We will disclose information if required by a valid subpoena, court order, or other legal process, or to protect our rights, property, or safety.
**We do not sell your personal information** and we do not share it with any party outside the categories above.

## 4. What cookies and tracking do we use?

Plain-English summary; the list below is the full answer. Our marketing pages carry the Meta Pixel, Google Tag Manager and RetargetIQ, the contact form uses a Cloudflare bot check, and your first visit is recorded in your browser's local storage. None of it is needed to order, submit a lead, or sign in.

Our marketing and lead-capture pages use the following tracking technologies:

- **Meta Pixel**: for measuring ad conversions and retargeting. Drops _fbp (first-party) and reads _fbc (set by Meta when you click a sponsored ad).
- **Google Tag Manager**: a container that loads other tags based on our configuration.
- **RetargetIQ**: audience segmentation for ad retargeting.
- **Cloudflare Turnstile**: a privacy-friendly, non-tracking bot check used on our contact form. It does not fingerprint you and does not store cookies outside the form submission flow.
- **First-visit record (browser local storage)**: on your first visit to allserviceleads.com, a script on our pages saves the visit source described in section 1 in your browser's local storage, under the name asl_first_touch. It is not a cookie. It is not sent to us until you place an order or send the "Talk to a team member" form, and we do not pass it to advertising or analytics companies. It stays in your browser until you clear this site's data.
You can opt out of Meta's ads-based profiling in your Facebook settings. You can block third-party scripts generally using browser privacy extensions. Our core service (placing orders, submitting leads, logging in) does not require any of these trackers to function.

## 5. How long do we keep your data?

Plain-English summary; the list below is the full answer. Contractor accounts are kept while the account is open and for seven years after it closes. Homeowner leads are kept for 24 months, then the identifying fields are purged. Billing records last seven years and server logs 30 days.

- **Contractor accounts:** retained for as long as your account is active plus 7 years after closure (for tax and legal reasons).
- **Homeowner leads:** retained for 24 months from submission. After that, personally identifying fields (name, phone, email, address) are purged; anonymized aggregate data may be retained for analytics.
- **Billing records:** retained for 7 years to comply with accounting and tax law.
- **Server logs (IP, user agent, request paths):** retained for 30 days.

## 6. What rights do you have over your data?

Plain-English summary; the text below is the full answer. Wherever you live you can ask for a copy of what we hold, ask us to correct or delete it, opt out of marketing, or object to processing. Residents of several states have extra rights. Email us and we answer within 30 days.

Regardless of where you live, you may contact us to:

- Request a copy of the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (subject to the legal retention periods above)
- Opt out of marketing communications (we don't currently send marketing email to contractors beyond order notifications, and homeowners only receive transactional confirmations)
- Object to or restrict certain processing
If you are a California, Colorado, Connecticut, Utah, or Virginia resident, you have additional rights under your state's privacy laws (CCPA/CPRA, CPA, CTDPA, UCPA, VCDPA) including the right to know, the right to delete, the right to correct, and the right to opt out of "sale" or "sharing" of personal information. We do not sell personal information as defined by these laws.

To exercise any of these rights, contact us at **info@roofroof.solutions** with "Privacy request" in the subject. We will respond within 30 days.

## 7. How is your data secured?

Plain-English summary; the text below is the full answer. Data is encrypted in transit and at rest, passwords are stored as bcrypt hashes, and card numbers are handled by Stripe and never touch our servers. No system is perfectly secure, so the paragraph below also sets the deadline for telling you about a breach.

We use industry-standard encryption in transit (TLS 1.2+) and at rest for all database storage. Passwords are stored as bcrypt hashes. Payment cards are handled exclusively by Stripe and never touch our servers. Access to production systems is limited to a small number of authorized personnel and protected by two-factor authentication.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you within 72 hours of discovery as required by applicable law.

## 8. Do we collect information from children?

Plain-English summary; the text below is the full answer. No. The service is aimed at roofing contractors and at homeowners asking about their own roof, not at anyone under 16, and we do not knowingly collect information from a child. If you think a child's details reached us, tell us and we delete them.

Our Service is not directed at children under 16 and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.

## 9. What if you are outside the United States?

Plain-English summary; the text below is the full answer. The service runs from the United States and is meant for people in the United States. If you use it from elsewhere, your information is transferred here and processed here, under data protection law that may differ from the law where you live.

Our Service is operated from the United States and is intended for users located in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have data protection laws that differ from those in your jurisdiction.

## 10. How will you know if this policy changes?

Plain-English summary; the text below is the full answer. The Last updated date at the top of this page changes whenever the policy does. A material change is emailed to contractors and posted on the homeowner landing page. Carrying on using the service after a change counts as accepting it.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be announced via email to contractors and a notice on the landing page for homeowners. Continued use of the Service after changes constitutes acceptance.

## 11. How do you contact us about privacy?

Plain-English summary; the line below is the full answer. Email info@roofroof.solutions with Privacy request in the subject, or use the form on the support page. That reaches a person, and a request to see, correct or delete what we hold is answered within 30 days.

For privacy questions, data requests, or any concerns about how we handle your information, contact us at **info@roofroof.solutions** or through the contact form on our [Support page](/support).