Privacy Policy
Last updated: October 19, 2026
1. Who we are
KC Roofing Directory is run by John Alewine in Kansas City, Missouri ("we", "us").
This policy covers kcroofingdirectory.com, the forms and assistants on it, and our phone number.
Contact: corrections@kcroofingdirectory.com or (816) 643-6667
2. What we collect and why
- Bid request form. Name, phone, email, ZIP code and the project details you pick (what you need, timeline, insurance claim, property type, roof age, best time to reach you). It goes to the one contractor named on the form, or to us when no contractor covers your ZIP yet. We do not sell, pool or publish it.
- Consent record. When you send the form we record that you agreed, when, the exact disclosure text, the page, your IP address and your browser's user agent. This is the evidence of what you asked for.
- Spam protection. Rejected or too frequent submissions are logged with IP address, user agent and ZIP. For ZIPs no contractor covers we count the ZIP and time only.
- Opt-outs. If you opt out on the unsubscribe page or reply STOP, we record the number or email, how and when.
- Kate, our AI assistant. Kate answers the chat on this site and calls to (816) 643-6667. Chats and calls are recorded and transcribed, and a summary of real requests is emailed to us.
- Contractors. If you claim a listing we store the business name, contact name, email, phone, role, license details and the facts you assert, plus IP address and user agent. Territory payments run on Stripe pages.
3. Who processes it for us
We use these service providers. Each gets only what it needs for the job listed.
| Provider | What it does and what it gets |
|---|---|
| Cloudflare | Hosts the site and the database your request is stored in. Sees connection data such as IP address and browser type. |
| Cloudflare Web Analytics | Counts page views. Sets no cookies and never sees what you type into the form. |
| Cloudflare Turnstile | Checks that the bid and claim forms are sent by a person. |
| AgentMail | Sends the lead notice to the contractor and your confirmation email, and holds our inboxes. |
| Twilio | Carries calls to (816) 643-6667, text notices to contractors who take leads by text, and STOP replies. |
| ElevenLabs | Runs Kate in the chat and on the phone. Records and transcribes conversations. |
| OpenAI (GPT-4o), used inside ElevenLabs | The language model that writes Kate's replies. |
| unpkg.com (CDN) | Delivers the ElevenLabs chat code to your browser. |
| Stripe | Takes territory payments from contractors. |
| The contractor named on the form | Receives your bid request. After that, they hold their own copy. |
We may also disclose information if the law requires it, to protect rights and safety, or as part of a sale or transfer of the business. We do not sell personal information.
4. Cookies and browser storage
The "compare" feature keeps the contractors you pick in your browser's session storage, which clears when you close the tab. It never leaves your browser. No advertising trackers or tracking cookies.
5. How long we keep it
| What | How long |
|---|---|
| Bid requests | Marked to keep for five years from the day you submit, so the consent evidence outlives the job. Deleted sooner when you ask (see section 6). |
| Consent records and opt-outs | Never deleted. The database blocks changes to both, so they can prove what you agreed to and that you opted out. Consent records hold no name, phone or email. |
| Rejected-submission and rate-limit logs (IP address) | No automatic expiry today. Deleted on request. |
| Kate chat and call recordings and transcripts | Deleted by ElevenLabs after 90 days. |
| Listing claims | Until reviewed and the listing is updated, then on request. |
| Emails in our inbox | As long as needed to handle the request, then deleted. |
Our own nightly database backups roll off after 14 days, so a deletion reaches the backups within that time.
6. Your choices and rights
You can ask us to tell you what we hold about you and give you a copy, correct it, delete it, or stop contacting you.
Use the Delete my data page (kcroofingdirectory.com/delete-my-data/). Enter the email you used; we email that address a 24 hour link, and nothing is deleted until you press the button on that page. It deletes your bid requests, their delivery records and any listing claim made with that email. The consent record and any opt-out stay, for the reason in section 5. We cannot delete the copy a contractor already received; ask them directly or reply STOP to their texts. To only stop contact, use the unsubscribe page. You can also email corrections@kcroofingdirectory.com from the address you used.
We answer within 30 days (45 days where California law applies). We may need to confirm the request comes from you, usually by replying from the address you used. You can name an authorized agent to ask for you. We will not treat you differently for using these rights.
7. If you are in the EU or UK (GDPR)
We use your information because you asked for something (to take steps toward a contract or to deliver it), because you agreed (for example to an email series or to recording), because the law requires it (tax and payment records), or for a legitimate interest in keeping the service safe from spam and abuse. You can withdraw consent at any time; that does not affect what happened before. Our providers process data in the United States. You can complain to your local data protection authority, though we would like the chance to fix it first.
8. If you are in California (CCPA and CPRA)
Categories collected in the last 12 months: the ones in section 2, which can include identifiers (name, email, phone, IP address), commercial information (purchases), internet activity on this site, audio (recorded chats and calls, where recorded), and what you send. We collect them for the purposes in section 2 and disclose them only to the providers in section 3. We do not sell personal information, do not share it for cross-context behavioral advertising, and do not use sensitive personal information to infer things about you.
9. Security
Access is limited to the people who run the service, the site runs over HTTPS, and our providers have their own security programs. No system is perfectly secure.
10. Children
KC Roofing Directory is not meant for children under 13 and we do not knowingly collect their information. Tell us if you think a child gave us information and we will delete it.
11. Changes
If this policy changes, we update this page and the date at the top.
12. Contact
corrections@kcroofingdirectory.com or (816) 643-6667. Kansas City, Missouri.