Rooftop Privacy Notice

Who this covers

People who use Rooftop for their work at a dealer group. Rooftop is a business tool. It is not offered to consumers and is not meant to hold retail customers' information.

What we hold

• Your account: name, work email, a scrambled (hashed) password, and the passkeys or authenticator you set up. Recovery codes are stored hashed.
• Your place in your group: role, the stores you work at or can view, and invitations.
• Store contacts your group enters: manager and signer names and emails, phone numbers, legal entity names and addresses.
• What you do for your group: listings, bids, approvals, messages, saved searches, and an audit trail of actions.
• Signature records: the name you type, a drawn signature if you draw one, the time, the consent you gave, and the IP address and browser used. We record your IP address only when you sign.
• Notification settings, and a browser push address if you turn push on.
• Feedback you send us from inside the app: your message, any files you attach, the page you were on, your name, email, role and group, your browser and device, and the last few requests that failed. No IP address.
• What you write to us through the form on our website: your name, work email, dealer group, number of stores, a phone number if you give one, and your message. It is emailed to us so we can reply, and is not stored in the Service. No IP address.
• Operational logs: the page requested, the result and how long it took. No IP address.
• Billing: Stripe collects and holds your card details. Rooftop never sees the card number. We hold your Stripe customer reference and subscription status.

What we do with it

Run the Service for your group, keep it secure, send the notices you have switched on and the account notices we must send, bill the subscription, and meet legal duties. We do not sell personal information, show ads, or track you across other sites. Rooftop uses a sign-in cookie and a few settings saved in your browser, and no advertising or analytics cookies. Our website sets no cookies, and its typefaces and scripts come from our own servers.

Who helps us provide it

• Amazon Web Services: hosting, database, document storage, signing keys and email delivery.
• Stripe: subscription billing.
• Anthropic or OpenAI: only if your group switches on the optional AI features, and then only the search sentence or spreadsheet column headings you submit. No inventory records, documents or personal details.
• Your browser's push service (Apple, Google or Mozilla): only if you turn on push. It carries a title, a line of text, a link, a reference to the notice and how many notices are new.

Inside your group, other members see your name, role and what you do for the group. Other stores see "another store" rather than your name where the Service hides identities, such as bidding.

How long we keep it

• Your group's business records (listings, transfers, documents, audit trail): for as long as the group exists.
• Notifications: 90 days. Operational logs: 30 days. Expired signing codes: 30 days.
• Feedback: the files you attached and who sent it are kept for one year, then removed. The words of the message are kept, with nothing that says who wrote them.
• When you leave a group, what is personal to you there is removed (saved searches, notification settings, push addresses, and your name and any files on feedback you sent us). What you did for the group, such as bids, approvals and signatures, stays with the group as its business record. A login that belongs to no group is deleted.
• When an administrator deletes a group, it is read-only for 14 days and then every record and file is permanently deleted. Backup copies expire within 35 days.
• The exceptions: Rooftop keeps the group's signed Terms of Service, Store Agreements and their signature records for six years, then deletes them. Rooftop also keeps the words of feedback sent to us, without its files and without anything that says which group or person sent it.

Your choices

Change your name, email and sign-in methods under Security. Switch emails and push off under Notification settings. Leave a group under Settings. To see, correct or delete personal information we hold about you, ask your group's administrator or write to support@rooftopautomarketplace.com. If a privacy law gives you rights over your personal information, we will honor them.

Security

Encrypted connections, encrypted document storage, each group's data kept apart from every other's, and required strong sign-in for people with authority. No system is perfectly secure; if we learn of unauthorized access to your information we will tell your group's administrators.

Changes

We will post changes here and email your group's administrators about important ones.