Privacy Policy

Effective August 16, 2026 · Last updated August 17, 2026

This policy explains what McQueen Roofing (“we”, “us”) collects when you use our website and estimating tools, why, and what control you have over it.

1. The short version

Estimates you generate in your browser are calculated on your device. The property details you type in are not sent to us to produce an estimate.
We do not run advertising trackers, and we do not sell or share personal information for advertising.
We use one third-party product analytics tool, FullStory, which records how pages are used so we can find and fix problems. Your address and the satellite image of your property are hidden from those recordings. See section 5.
We do not sell personal information, and we do not pass a homeowner's details to a contractor unless that homeowner asks us to.
Where features involve accounts, saved work, or payment, the sections below say what changes.

2. Information we collect

Information you give us

Estimate inputs — property address, roof measurements, pitch, material choices. See section 3 for how these are handled.
Account details, if you create an account — name, email address, password, and for contractors, business details such as company name, service area, and logo.
Content you upload, such as measurement or aerial reports.
Messages you send us, including their contents.

Information collected automatically

Server logs — IP address, date and time, page requested, referring page, user agent. These are generated by our web server as a normal part of serving requests and are used for security, debugging, and abuse prevention.
A session cookie — see section 5.
Product analytics and session recordings — pages visited, clicks, scrolling, and form interactions, captured by FullStory. Recordings show what was done, not what was typed into the fields we mask. See section 5.

What we do not collect

We do not collect government identifiers, precise device geolocation, or biometric data. We do not buy personal information about you from data brokers, and we do not build advertising profiles.

3. How the estimator handles your address

The estimator on our home page runs entirely in your browser. When you type an address, it is used on your device to produce an assumed roof footprint, which the calculator then prices. That address is not transmitted to our servers as part of generating the estimate, and we do not store it.

To be explicit about what the assumption is: it is derived from typical property sizes, not from any measurement, survey, imagery, or property record for your home. You can overwrite it with your real footprint.

If you later choose to save an estimate, send it to someone, or request contact from a contractor, the details you submit at that point are sent to us and handled under the rest of this policy. We will make it clear at the moment you are asked.

4. How we use information

To provide, operate, and improve the Service.
To create and price estimates you have asked for.
To maintain accounts, authenticate users, and provide support.
To take payment for measured estimates and any paid plans, through our payment processor, Stripe.
To secure the Service, prevent abuse, and investigate incidents.
To send service messages such as receipts, security notices, and material changes to this policy.
To send marketing messages only where you have opted in, with an unsubscribe link in every one.
To comply with legal obligations and enforce our Terms of Service.

We do not use your estimate inputs or business data to train models sold or licensed to third parties.

5. Cookies and session recording

This site sets a strictly necessary session cookie, _mcqueen_session. It protects form submissions against cross-site request forgery and, where applicable, keeps you signed in. It is marked Secure, HttpOnly, and SameSite=Lax, and it expires when you close your browser.

We also use FullStory, a product analytics tool that records how pages on this site are used — which pages you visit, what you click, how far you scroll, and where you get stuck. It sets its own cookies to recognise a returning browser. We use it to find and fix problems in the estimating flow, not to advertise to you, and we do not sell what it collects.

What is hidden from those recordings. We mask or exclude the sensitive parts of this site at source, before anything is sent:

Your property address, wherever you type it or we display it back to you — recordings show that you typed something, not what.
The satellite image of your property, and the coordinates behind it, on the confirmation screen. These are never sent.
Your name and email address in account forms.
Your password, which is excluded outright and never captured in any form.

If you have an account, recordings are linked to it by your user id, name, and email address, so that support can find the session behind a problem you report.

We do not use advertising or social media cookies. If that changes we will update this policy first and, where consent is required, ask for it before setting them.

6. Sharing information

We do not sell personal information. We share it only as follows:

Service providers who host and operate the Service on our behalf, under contract and only for that purpose. Our infrastructure runs on Amazon Web Services in the United States, and product analytics are processed by FullStory in the United States.
Stripe, our payment processor, when you pay for an estimate. You enter card details on Stripe's own checkout page, not ours; we receive confirmation that a payment succeeded and never see or store your card number. Stripe processes this in the United States.
Contractors, only when a homeowner asks to be contacted or explicitly shares an estimate. We do not sell or pass on homeowner leads without that permission.
Legal and safety — where we are legally required to, or to protect the rights, property, or safety of our users or the public.
Business transfers — if we are involved in a merger, acquisition, or sale of assets, information may transfer as part of it. We will give notice before your information becomes subject to a materially different policy.

7. Retention

We keep information only as long as needed for the purposes above. Server logs are retained for a short operational period. Account information is kept while the account is active and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution obligations, then deleted or anonymised.

8. Security

All traffic to this site is encrypted in transit with HTTPS, and we apply HSTS. Access to production systems is restricted. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and any regulator as required by law if a breach affects your personal information.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a portable copy of your personal information, to opt out of targeted advertising or the sale or sharing of it, and to appeal a refusal. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of, but the right stands.

Delaware residents have these rights under the Delaware Personal Data Privacy Act, including the right to appeal if we decline a request. California residents have equivalent rights under the CCPA as amended by the CPRA, including the right not to be discriminated against for exercising them. Residents of other states with comprehensive privacy laws have similar rights, and we apply this section to everyone regardless of where they live.

To make a request, email duncan@startupmaphub.com. We will respond within the time the applicable law allows. We may need to verify your identity first — usually by confirming control of the email address on the account. An authorised agent may act for you with written permission.

10. Children

The Service is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

11. Visitors outside the United States

We operate in the United States and information is processed there. If you use the Service from elsewhere, you understand your information is transferred to and processed in the United States, where data protection law may differ from your own.

12. Third-party links

This site may link to sites we do not control. Their privacy practices are their own, and we are not responsible for them.

13. Changes to this policy

We may update this policy. We will change the “Last updated” date above, and for material changes we will give additional notice where practicable before they take effect.

14. Contact

Privacy questions and requests: duncan@startupmaphub.com.