Privacy policy

BOR and its infrastructure providers receive ordinary request data such as IP address, browser, device, requested page, time, referrer, and security signals. Cloudflare and Vercel use some of this information to deliver the site, cache pages, detect abuse, and protect the service.

If you accept analytics, PostHog records page views, clicks and form interactions, performance measurements, dead-click diagnostics, heatmaps, named conversion events, and session replays. Replays can reproduce the pages and interactions in a visit. Form inputs are masked before replay data leaves the browser, sensitive elements are excluded, and selected sensitive query parameters are redacted. BOR also excludes names, email addresses, phone numbers, street addresses, and free-form answers from PostHog event properties.

The BOR PostHog project retains the raw source IP that accompanies a request and uses it to derive approximate country, region, and city. IP-based location can be wrong for mobile networks, VPNs, or shared connections. An IP address and the browser identifiers used by analytics tools can be personal information under some laws, so BOR does not describe this collection as anonymous.

BOR uses Google advanced consent mode. The Google tag loads with analytics and advertising storage denied before you make a choice. While storage is denied, Google may receive consent status and cookieless measurement signals, including page, referrer, time, and browser information. Google can use those signals for modeled measurement. Accepting analytics allows Google Analytics to use its normal measurement storage. Accepting marketing also allows Google advertising storage and advertising signals.

Meta Pixel loads only if you accept marketing. It records page views and selected conversion events for Facebook and Instagram measurement and advertising. If you then submit a quote request, BOR also sends a matching server-side Lead event to Meta. That event can include normalized, one-way-hashed email, phone, name, city, state, ZIP code, and country, plus the request IP address, browser user agent, Meta browser or click identifiers, source URL, and a deduplication ID. BOR does not send Meta the street address, budget, payment method, project message, or selected roofer. Ahrefs and PostHog load only if you accept analytics. BOR does not intentionally add lead-form contents to Google, Ahrefs, or PostHog events.

Sentry provides necessary error monitoring. It may receive error details and a limited sample of session replays so BOR can diagnose failures. Sentry replays mask all page text and inputs and block media. This monitoring does not depend on the optional analytics or marketing choice.

A quote request may ask for your project type, urgency, budget preference, payment method, property address, city, state, ZIP code, name, phone number, email address, and the roofer or insurance question you selected. BOR uses this information to respond, understand the requested service area, prevent duplicate or abusive submissions, and operate the quote workflow.

Choosing one roofer does not give BOR permission to distribute your details to an open list of businesses. If BOR offers additional quotes, your contact information is shared with additional providers only after a clear multi-quote opt-in. The selected provider receives the first request when that provider is available through BOR.

BOR uses information to provide rankings, process requests, communicate with visitors, measure whether pages are useful, diagnose errors, secure the service, and meet legal obligations. Service providers may process information for hosting, databases, analytics, error monitoring, security, email, or advertising measurement under their own contracts and privacy terms.

BOR may disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards. BOR does not promise that advertising measurement is anonymous in every jurisdiction. Browser identifiers, IP-derived location, and event history can be personal information under some laws.

Analytics and advertising tools may use cookies or similar browser storage. You can accept all optional tools, allow analytics without marketing, or reject optional tracking. Use "Privacy choices" in the footer to change the stored choice at any time. A later change controls future collection but does not erase information already collected. You can also clear browser storage, use browser privacy controls, block third-party requests, or contact BOR about a privacy request. Necessary security, delivery, and error-monitoring technology may still operate because the site cannot run safely without it.

BOR keeps information only as long as needed for the purpose described, dispute handling, security, backup, accounting, or legal requirements. Retention can differ between lead records, security logs, analytics, and immutable ranking evidence. BOR uses access controls, row-level database security, encrypted transport, rate limits, and provider security features, but no online system can promise absolute security.

To ask for access, correction, deletion, or information about a privacy choice, email [email protected]. Include the email or phone number used in your request and enough detail to locate the record. BOR may need to verify your identity before acting.

Review the terms of use for the limits of ranking and quote information.