Privacy Policy

The short version. We collect what we need to run a membership and nothing else. We never see your card number. We don't sell personal information, we don't run advertising trackers on this site, and when a member puts a homeowner's details into a proposal, we use them only to deliver that proposal, never to market to that homeowner.

1. Who we are

This policy explains how Roofing Standards Alliance, operating as the National Roofing Standards Alliance (“NRSA,” “we,” “us”), handles personal information. NRSA is an independent private membership association for roofing contractors, not a government agency or licensing body. You can reach us at support@nationalroofingstandards.org or Roofing Standards Alliance, 1000 North West Street, Wilmington, DE 19801, United States.

2. Information members give us

When a roofing business joins, we collect the business name, contact email, phone, website, location, service details, and whatever the member later publishes to their profile. That includes the About text, team member names, roles and photos, work photos, and credential entries such as license numbers, insurance details, and certifications. Members choose what to publish; anything they publish appears on their public profile page and may appear on proposals they create. We do not verify these materials (see the Terms of Service, Section 6).

3. Information about a member's customers

When a member builds a proposal, they enter their own customer's name and job address, and may upload photos of that property. NRSA stores this on the member's behalf so the proposal can be delivered, and uses it for no other purpose. We do not market to a member's customers, sell this information, or use it to build any list. A proposal is reachable only by its unguessable link and is excluded from search-engine indexing. If a homeowner wants a proposal about them removed, contact us or the member, and we will remove it. When a member's membership ends, their proposals stop being publicly reachable.

4. Payment information

Membership payments are processed by Stripe. Card details are entered on Stripe's systems; NRSA never receives or stores them. We retain the Stripe customer and subscription identifiers, the renewal date, and membership status so we can operate the membership, send renewal reminders, and honor cancellations.

5. Sign-in and account security

The member portal uses email sign-in links. We store the account email, a sign-in token that expires, and a session cookie that keeps a member signed in. This cookie is strictly functional. It is not used for advertising or cross-site tracking, and we do not use advertising cookies or third-party tracking pixels on this site.

6. Usage information we generate

We count how many times a member's embedded badge is displayed and how many times each proposal is opened, along with the first and last time it was opened, and we show these counts to that member. These are simple counters attached to the badge or proposal. They are not used to build a profile of the person viewing, and they are not shared with anyone else. We also use Vercel Analytics to understand which pages are visited and how people move through the site: it is privacy-focused and cookieless, does not track visitors across other websites, and reports aggregate figures rather than identifying anyone. Our hosting and email providers additionally keep standard technical logs (such as IP addresses and error records) for security and reliability.

7. Business contact data for outreach

To tell roofing contractors that NRSA exists, we maintain a private list of business contact information compiled from public business listings: company name, business address, business phone, and where available a business email. This list is used only for our own mail and email outreach about membership; it is never published, never shown in the member directory, and never sold or rented. Any email we send includes a working unsubscribe link and our postal address, and we honor opt-outs promptly. To be removed from our outreach list, email support@nationalroofingstandards.org.

8. How we use information

We use the information above to provide membership benefits (publishing the profile, rendering the badge, building and delivering proposals), to run the account (payments, renewal reminders, receipts, support), to measure and improve the website, to enforce our Content Standards and Code of Standards, to handle complaints, and to comply with law. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

9. Service providers we rely on

We use a small set of providers to run the platform: Vercel (website hosting, file storage for uploaded images, and cookieless analytics), Neon (database), Stripe (payments), and Resend (transactional email such as sign-in links, renewal reminders, and proposal notifications). They process information only to provide those services to us. We do not disclose personal information to anyone else except where required by law, to protect our rights or the safety of others, or in connection with a sale or reorganization of the business, in which case this policy continues to apply to information transferred.

10. How long we keep information

We keep member account and profile information while the membership is active and for a reasonable period afterward for records, tax, and dispute purposes. Payment records are retained as required for accounting and tax. Proposals and their photos are retained while the membership is active; a member may delete any proposal at any time. Prospect outreach records are kept until we no longer need them or you ask us to remove you.

11. Your choices and rights

Members can view and edit nearly all of their information directly in the member portal, and can delete profile items, photos, team entries, credentials, and proposals themselves. On request we will confirm what personal information we hold about you, correct it, or delete it, subject to records we must keep by law. Depending on where you live (including California, Colorado, Connecticut, Virginia, and other states with privacy statutes), you may have specific rights to access, correct, delete, or obtain a copy of your information, and to appeal a decision we make about such a request. We do not discriminate against anyone for exercising these rights. Email support@nationalroofingstandards.org to make a request.

12. Security

The site runs over encrypted connections, payments are handled by Stripe, and access to member data in the portal requires a signed-in account. No system is perfectly secure, and we cannot guarantee absolute security. But we limit what we collect, and we do not store card numbers at all.

13. Children

NRSA is a business-to-business service. It is not directed to children, and we do not knowingly collect personal information from anyone under 16.

14. Where information is handled

NRSA is a United States entity serving United States businesses, and its providers process information in the United States. The business is owned and operated from Canada, so information may be accessed from Canada in the course of running it.

15. Changes

If we change this policy in a way that materially affects how we handle personal information, we will update the date below and notify members by email before the change takes effect.