Privacy Policy

We collect personal information in three ways: information you give us directly, information collected automatically when you use the Services, and information we receive from third parties.

(a) Information you provide to us. This includes:

(i) Account information, such as your name, email address, phone number, ZIP code, and password. If you sign in with Google, we receive your name, email address, Google account identifier, and profile photo from Google.

(ii) Property and project information, such as your property address, the service you are requesting (for example, roofing or gutters), details about your home, project descriptions, material and product selections, scheduling preferences, and insurance-claim related information you choose to share.

(iii) Documents and files you upload, such as roof measurement reports, estimates, invoices, insurance documents, receipts, and photos of your property.

(iv) Agreements and signatures, such as your name, email address, and signature when you electronically sign estimates, invoices, affidavits, certificates of completion, or other project documents.

(v) Payment information, such as card details or bank account information you provide at checkout. Payment card and bank account details are collected and processed directly by our payment processor; we do not store full card numbers or bank account credentials on our servers. We do retain records of your payments, such as amount, date, payment method type, and status.

(vi) Communications, such as messages you send through project chat to your contractor, installer, or WayBe, conversations with our AI assistant, support requests, reviews, and other correspondence with us.

(b) Information collected automatically. When you use the Services, we and our service providers automatically collect certain information, including:

(i) Device and usage information, such as your IP address, browser type, device type, operating system, pages and screens viewed, actions taken, and the dates and times of your visits.

(ii) Information stored on your device, such as authentication tokens and in-progress project or session details kept in your browser's local storage so that you stay signed in and can resume where you left off.

(iii) Push notification tokens, if you enable notifications in our mobile applications.

(c) Information from third parties. We may receive information about you or your property from:

(i) Sign-in providers, such as Google, if you choose to sign in with them.

(ii) Mapping, geocoding, and property data providers, which we use to validate and autocomplete your address, locate your property, and obtain aerial imagery-based roof measurements and related property characteristics.

(iii) Aerial measurement providers, which may supply measurement reports for your property when you or WayBe request one.

(iv) Contractors, installers, and suppliers working on your project, who may provide project updates, notes, photos, estimates, invoices, and completion documents.

(v) Our payment processor, which provides us with payment confirmation and status information.

(vi) Review platforms, if you leave a review of WayBe.

We use personal information for the following purposes:

(a) To provide the Services, including creating and managing your account, building your project, measuring your property, generating estimates, presenting materials and pricing, and matching you with and booking contractors and installers.

(b) To process payments, including holding and releasing funds in connection with your project as described in our Terms and Conditions, issuing receipts, and handling refunds and disputes.

(c) To facilitate communication between you, your contractor or installer, and WayBe, including project chat, email, and push notifications about your project.

(d) To prepare, deliver, and collect electronic signatures on project documents.

(e) To power AI features, including our AI shopping assistant and the automated extraction of measurements from documents you upload, as described in Section 4.

(f) To provide customer support and respond to your requests.

(g) To send you service-related messages, such as account confirmations, password resets, project updates, and changes to our terms or policies.

(h) To send you marketing communications where permitted by law. You can opt out at any time as described in Section 9.

(i) To maintain the safety and security of the Services, including detecting, preventing, and investigating fraud, abuse, and security incidents.

(j) To analyze and improve the Services, including understanding how the Services are used, developing new features, and creating aggregated or de-identified information that does not identify you.

(k) To comply with legal obligations, enforce our Terms and Conditions, and protect the rights, property, and safety of WayBe, our users, and others.

We share personal information only as described below.

(a) Contractors, installers, and suppliers on your project. When you request or book a project, we share the information needed to perform the work, such as your name, contact details, property address, project details, measurements, material selections, uploaded documents, and project chat messages, with the contractors, installers, and suppliers assigned to your project. These businesses use your information to provide their services to you and are responsible for their own handling of it.

(b) Service providers. We share information with vendors who perform services on our behalf, such as cloud hosting and file storage, payment processing, electronic signature, email delivery, push notifications, mapping and property data, aerial measurement, AI and machine-learning processing, and customer review collection. These service providers are permitted to use your information only as needed to provide services to us.

Our service providers currently include, for example: Stripe (payment processing, including card and bank account payments); Google (sign-in with Google, and address autocomplete, geocoding, and roof and solar imagery data through Google Maps Platform services); OpenAI (AI assistant responses and document measurement extraction); DocuSign (electronic signatures); Twilio SendGrid (email delivery); Amazon Web Services (file storage); Expo (mobile push notification delivery); EagleView (aerial roof measurement reports, where ordered); and Trustpilot and Trustindex (customer review invitations and review widgets). This list may change over time.

(c) Legal and safety. We may disclose information if we believe in good faith that doing so is required by law, subpoena, court order, or other legal process, or is necessary to protect the rights, property, or safety of WayBe, our users, or others, or to investigate fraud or violations of our Terms and Conditions.

(d) Business transfers. If WayBe is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, your information may be transferred as part of that transaction, subject to customary confidentiality protections.

(e) With your consent or at your direction. We may share information with other parties when you ask us to or give us permission, such as when you choose to share project documents with your insurance carrier.

(f) Aggregated or de-identified information. We may share information that has been aggregated or de-identified so that it cannot reasonably be used to identify you.

We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws.

The Services include features powered by artificial intelligence, including an AI shopping assistant that helps you navigate the Services, answer questions, and make selections, and automated tools that read measurement reports and other documents you upload to extract project data.

When you use these features, the content you provide, such as your messages to the assistant, relevant project details, and uploaded documents, is sent to third-party AI model providers that process it on our behalf to generate a response or extraction. We use these providers under terms that limit their use of the data to providing services to us.

AI-generated output, including estimates, measurements, and recommendations, may be inaccurate or incomplete. Please review it carefully before relying on it, and do not share sensitive information, such as government identification numbers, financial account numbers, or health information, with the AI assistant.

We may retain conversations with the AI assistant to provide the Services, maintain your conversation history, provide support, and improve the quality and safety of our features.

We and our service providers use cookies, browser local storage, and similar technologies to operate the Services. For example, we store an authentication token and in-progress project details in your browser's local storage so that you remain signed in and can return to your project.

Some pages include content and scripts from third parties, such as customer review widgets and review invitation tools. These third parties may collect information about your device and your interaction with their content, such as your IP address and browser information, in accordance with their own privacy policies.

Most browsers let you block or delete cookies and clear local storage. If you do so, some parts of the Services, such as staying signed in or resuming a project, may not work properly.

Some browsers offer a "Do Not Track" setting. Because there is no common industry standard for responding to these signals, the Services do not currently respond to them. Where required by applicable law, we will honor recognized opt-out preference signals, such as Global Privacy Control.

The Services may contain links to, or integrations with, websites and services operated by third parties, including contractors, suppliers, sign-in providers, payment processors, and review platforms. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies. Information you provide directly to a third party is governed by that third party's policies.

We retain personal information for as long as needed to provide the Services and for the purposes described in this Privacy Policy, including to maintain your account and project history, honor warranties and resolve disputes, comply with our legal, tax, accounting, and reporting obligations, and enforce our agreements.

Project records, signed documents, and payment records may be retained for a longer period after a project is completed where required or permitted by law. When we no longer need personal information, we delete it or de-identify it. Contractors, installers, and suppliers who received your information for a project may retain it under their own record-keeping obligations.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption of data in transit, hashing of passwords, access controls, and the use of established payment processors that handle payment card and bank account data.

No method of transmission or storage is completely secure, and we cannot guarantee the security of your information. You are responsible for keeping your account credentials confidential and for notifying us promptly if you believe your account has been compromised.

(a) Account information. You can review and update certain account information by signing in to your account. You can also contact us to request changes.

(b) Marketing communications. You can opt out of marketing emails by following the unsubscribe instructions in the email or by contacting us. We will still send you service-related messages about your account and projects.

(c) Push notifications. You can turn off push notifications at any time in your device settings.

(d) U.S. state privacy rights. Depending on where you live, including California, Texas, and other states with comprehensive privacy laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA") and the Texas Data Privacy and Security Act ("TDPSA"), you may have the following rights, subject to certain exceptions:

(i) The right to know or access the personal information we have collected about you, including the categories of information, the sources, the purposes for which we use it, and the categories of third parties to whom we disclose it, and to obtain a copy of it in a portable format.

(ii) The right to correct inaccurate personal information.

(iii) The right to delete personal information we have collected from you.

(iv) The right to opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. As stated above, we do not sell personal information or share it for cross-context behavioral advertising.

(v) The right to limit the use of sensitive personal information, where applicable. We do not use sensitive personal information for purposes that would require us to offer this right under the CCPA.

(vi) The right not to be discriminated against for exercising any of these rights.

(e) Exercising your rights. To exercise any of these rights, contact us at privacy@waybe.ai with the subject line "Privacy Rights Request." We will need to verify your identity before responding, which may include asking you to confirm information associated with your account. You may use an authorized agent to submit a request on your behalf where permitted by law; we may require proof of the agent's authority and verification of your identity.

(f) Appeals. If we decline to take action on your request, you may appeal our decision by replying to our response or by emailing privacy@waybe.ai with the subject line "Privacy Request Appeal." We will respond to your appeal within the time required by law. If your appeal is denied, you may contact the attorney general of your state, including the Texas Attorney General, to submit a complaint.

(g) Categories of personal information. In the preceding 12 months, we have collected the following categories of personal information described in the CCPA: identifiers (such as name, email address, phone number, and IP address); customer records (such as property address and payment records); commercial information (such as projects, products, and services requested or purchased); internet or other electronic network activity information; approximate geolocation derived from your property address or IP address; audio, electronic, visual, or similar information (such as uploaded photos and documents); and inferences drawn from the foregoing (such as estimated project needs). We collect this information from the sources described in Section 1, use it for the purposes described in Section 2, and disclose it for business purposes to the categories of recipients described in Section 3.

(h) Texas notice. We do not sell sensitive personal data or biometric data. If that ever changes, we will provide the notices required by Texas law.

The Services are intended for individuals who are at least 18 years old and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, please contact us at privacy@waybe.ai and we will take steps to delete it.

The Services are intended for use in the United States and are operated from the United States. If you access the Services from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Modified" date at the top of this page. If we make material changes, we will provide notice through the Services or by other means, such as email, as required by law. Your continued use of the Services after an update takes effect means you acknowledge the updated Privacy Policy.

If you have questions or concerns about this Privacy Policy or our privacy practices, or would like to exercise your privacy rights, please contact us at:

WayBe Labs Inc.

Email: privacy@waybe.ai

Website: waybe.ai/privacy-policy