Privacy Policy

1. Who We Are

JobDrop is a portfolio and marketing platform for roofing contractors. We help contractors showcase their work, capture leads, and build their reputation online.

When we say “we,” “us,” or “JobDrop,” we mean JobDrop and its operators. When we say “you,” we mean anyone who uses our platform, whether you’re a contractor, a homeowner, or a visitor.

Questions? Contact us at jordan@jobdrop.co.

2. Information We Collect

From Contractors

• Account information (name, email, phone number)
• Company details (business name, address, license number, insurance and bonding status, certifications)
• Project content (photos, voice recordings, project descriptions, locations)
• Team information (crew member names, roles, phone numbers, email)
• Payment information (processed by Stripe — we do not store card numbers)
• Review platform ratings and profile URLs

From Homeowners and Visitors

• Contact information submitted via estimate forms or the text widget (name, phone number, email, address)
• Review and feedback data (star rating, review text, reviewer name)
• SMS consent records (timestamp, consent text, phone number)
• Call metadata (caller ID, call duration, timestamp)

Automatically Collected

• Device and browser information (IP address, user agent, screen size)
• Usage analytics (pages visited, features used, timestamps)
• Referring URLs and UTM parameters

3. How We Use Your Information

• Providing and improving the JobDrop platform (account management, project pages, interactive maps, lead capture)
• Processing voice recordings and generating project content using AI (see Section 5)
• Sending transactional communications (review requests, lead notifications, estimate confirmations)
• Processing subscription payments via Stripe
• Analyzing platform usage to improve features and fix issues
• Complying with legal obligations

4. AI-Generated Content

JobDrop uses artificial intelligence to help contractors create project pages efficiently:

• Voice transcription: Voice recordings are transcribed using OpenAI’s speech-to-text service.
• Content generation: Project titles, descriptions, and other text content are generated by Anthropic’s Claude AI from the transcribed text and project details.
• Contractor review: All AI-generated content is presented to the contractor for review and editing before publication.

Your data is not used to train AI models. Voice recordings and transcripts are processed solely to generate your project content and are handled according to our data retention policies.

5. SMS & Text Messaging

JobDrop’s platform does not currently send text messages. When a contractor asks a homeowner for a review, that message is sent by the contractor from their own phone, through their own messaging app and their own number. JobDrop prepares the draft; the contractor sends it.

If platform text messaging is enabled in future, it would work in two separate ways.

From a contractor to a homeowner. Each contractor registers their own messaging campaign under their own business identity, and messages are sent under that contractor’s name rather than JobDrop’s. This would cover review requests after completed roofing projects, and appointment or project follow-ups.

From JobDrop to a contractor or their staff. Messages to our own customers — lead and missed-call notifications, and team member invitations — would come from JobDrop’s own number, because in that case the recipient is our customer rather than a contractor’s.

Consent: You will only receive text messages if you gave the contractor your phone number — by submitting a form on their pages, where submitting confirms that you agree to be contacted, or during an in-person service engagement with them.

Opt-out: Reply STOP to any message to unsubscribe. Reply HELP for assistance. Message and data rates may apply. Message frequency varies.

We will not share, sell, or distribute your mobile phone number or any information collected through our text messaging program to third parties or lead generators.

6. Voice Calls & Recording

JobDrop provides call tracking numbers that forward to the contractor’s phone. When you call a tracking number:

• We capture call metadata (caller ID, duration, timestamp) for attribution and analytics
• Live calls are not recorded. If you leave a voicemail, a notice plays before the tone and the message is recorded
• Voicemail audio is deleted from our telephony provider within 48 hours. The transcript is kept with the lead record
• Voicemail transcripts reach the contractor by email and by notification in their dashboard

7. Location Data

Project locations are displayed as pins on an interactive map on the contractor’s public profile. To protect homeowner privacy, map pins are intentionally offset from the actual project address by approximately 50–200 meters. Exact street addresses are never displayed publicly.

8. Cookies & Tracking Technologies

We use cookies and similar technologies for:

• Authentication: Keeping you signed in (via Clerk)
• Analytics: Understanding how the platform is used (via PostHog)
• Payment processing: Secure checkout sessions (via Stripe)
• Maps: Rendering interactive maps (via Mapbox)
• View-count deduplication: Per-tab session keys (sessionStorage) so refreshing a public project page does not inflate the view counter

You can manage cookies through your browser settings. We honor Global Privacy Control (GPC) browser signals as a valid opt-out request.

9. How We Share Your Information

We do not sell your personal information. We share data only with the following service providers who help us operate the platform:

• Clerk — authentication and user management
• Convex — database and backend infrastructure
• Stripe — payment processing
• Twilio — SMS messaging and voice call tracking
• Mapbox — interactive maps
• OpenAI — voice transcription
• Anthropic — AI content generation
• Resend — transactional email delivery
• Vercel — web hosting and deployment
• PostHog — product analytics

We may also share information when required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets (with notice to affected users).

All of the above categories exclude text messaging originator opt-in data and consent. Mobile phone numbers collected for text messaging, and the consent records attached to them, are never shared with third parties or lead generators for their own purposes, and are not transferred in connection with a sale of the business.

10. Data Retention

• Active accounts: Data is retained for the duration of your account
• Deleted content: Moved to trash and permanently deleted after 30 days
• Voicemail audio: Automatically deleted within 48 hours; the transcript is kept with the lead
• View-event records: Anonymous public-page view events are retained for 90 days, then automatically purged
• SMS message logs: Retained by Twilio for 30 days, then auto-deleted
• Consent records: Retained indefinitely for compliance
• Cancelled accounts: Data is available for export for 30 days after cancellation, then deleted per our retention schedule

11. Data Security

We implement reasonable security measures to protect your information:

• All data is transmitted over HTTPS (encrypted in transit)
• Sensitive data is encrypted at rest
• Authentication is managed by Clerk with support for multi-factor authentication
• Role-based access controls limit data access within contractor organizations (Owner, Manager, Crew)

No system is 100% secure. If we become aware of a data breach, we will notify affected users as required by law.

12. Your State Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to know what personal information we collect and how it is used
• Right to access your personal information in a portable, machine-readable format
• Right to correct inaccurate personal information
• Right to delete your personal information
• Right to opt out of the sale or sharing of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

These rights are available to residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with applicable privacy laws.

To exercise your rights, contact us at jordan@jobdrop.co. We will respond within 45 days. If we deny your request, you may appeal by contacting us at the same email address.

13. Children’s Privacy

JobDrop is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to This Policy

We may update this policy from time to time. We will update the “Last updated” date and, for material changes, notify you via email or an in-app notification. Your continued use of JobDrop after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights:

• Email: jordan@jobdrop.co
• Website: jobdrop.co